Security vulnerability pattern library for code review

Description

Hunt for security vulnerabilities in a codebase using a library of 90+ concrete, stack-specific patterns - each with a searchable signal, a vulnerable example, the fix, severity, and its OWASP category and CWE - covering general web (injection, XSS, SSRF, IDOR, CSRF, JWT, CORS, secrets), Next.js (Server Actions, proxy/middleware auth, data leaks to client), Supabase/Postgres (RLS, SECURITY DEFINER, storage, service-role keys), Expo/React Native mobile (secure storage, deep links, WebViews), Stripe/RevenueCat payments (webhooks, price trust, entitlements) and ASP.NET Core/.NET. Use whenever the user asks for a security review, security audit, vulnerability scan, pentest prep, "is this secure?", OWASP review, or before a launch, a payment integration, or a compliance questionnaire - even if they only ask to "check this for problems".