OWASP maintains a list of common web vulnerabilities. The version prioritizes:
Broken access control
Cryptographic failures
Injection (SQL, command, XSS)
Insecure design
Security misconfiguration
I'll cover the ones AI gets wrong most often in the following units.