Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.semgrep.dev/llms.txt

Use this file to discover all available pages before exploring further.

An application security vulnerability is a weaknesses in software systems that can be exploited by attackers to compromise the confidentiality, integrity, or availability of applications and data. Understanding these vulnerabilities is crucial for building secure applications and maintaining a strong security posture.

​
What We’ll Teach You

This section covers common security vulnerabilities that affect modern applications. For each vulnerability type, we’ll explain:
  • How the vulnerability occurs including the root causes and common scenarios.
  • Real-world examples with code patterns that introduce these types of issues.
  • Impact and risks as a consequence for when these vulnerabilities are exploited.
  • Prevention techniques and secure coding best practices to avoid the problems.
  • Detection methods such as how Semgrep can help with identification by scanning code.
Learning about these vulnerabilities helps you write more secure code and build better defenses into your applications from the start.

​
Vulnerability Categories

Code Injection (RCE)

Command Injection

Cross-Site Scripting (XSS)

Insecure Deserialization

Insecure Direct Object Reference (IDOR)

Open Redirect

Server Side Request Forgery (SSRF)

SQL Injection (SQLi)

XML Security (XEE, XXE)

​
Additional Resources

  • Security Research Blog: Recent blog posts from the Semgrep Security Research team discussing trends in vulnerability research and application security.