
DVSA
a Damn Vulnerable Serverless Application
api-security-testingcloud-infrastructure-securitycloud-security+6

a Damn Vulnerable Serverless Application

Exploit for CVE-2025-69256, a pre-auth command injection in Serverless Framework MCP server, enabling RCE via workspaceRoots injection with…

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.