Last week, I ran AINAScan — our AI-powered static analysis tool — against FlaskBlog , a popular open-source Flask project. It found two security issues back-to-back. Here's the breakdown. Issue #1: IDOR — Direct Object Reference Without Authorization Check The bigger finding was a classic IDOR (Insecure Direct Object Reference) vulnerability. A user could directly reference another user's resource by ID without any authorization check. This is issue #254 . Issue #...