API Endpoint Vulnerabilities