tier1:
  - CSRF
  - XSS
  - "SQL Injection"
  - "Command Injection"
  - "Code Injection"
  - SSRF
  - "Path Traversal"
  - XXE
  - "Cookie Flag Security"
  - "Active Debug Code"
tier2:
  - Cryptography
  - Deserialization
  - "Hard-coded Secrets"
  - "Open Redirect"
  - "Mass Assignment"
  - "Prototype Pollution"
tier3:
  # - JWT 
  - Regex
  - "Denial of Service"