insecure-design 3 Sensitive Information Disclosure – Secrets Exposed in Base64 Session Cookie | Cookie Cutter May 20, 2026 Mass Assignment Leading to Admin Account Creation | Trellis May 14, 2026 Predictable Token Enumeration – Gift Card Redemption Abuse | BugForge Lab May 3, 2026