Please review the article that discusses twenty web API vulnerabilities I encountered this year. If you wish, I can turn any of them into a detailed, in-depth article with a small repository and testing schedule. I will read all your comments.