## Findings

- **{{Severity}}** ({{WSTG-INPV-17}}): {{module}} / {{category: ssrf | idor | mass-assignment | sqli | shell-injection | template-injection | deserialization | file-upload | prototype-pollution | redos}}: {{defect}}. Evidence: `{{file}}:{{line}}`. Reproduction: {{endpoint, parameter, expected vs observed}}. Required action: {{fix}}.
- {{...}}

## Open Questions

- {{omit when none}}