What are common vulnerabilities in ChatGPT code?

The most frequent vulnerabilities in ChatGPT-generated code include SQL injection from string-concatenated queries, cross-site scripting from unsanitized output rendering, hardcoded API keys and credentials, missing CSRF protection, insecure direct object references, and broken access control logic. ChatGPT also tends to generate overly permissive CORS configurations, skip rate limiting, and use outdated libraries. UNPWNED's currently enabled outside-in Deep Scan with up to 702 configured checks spans 33 coverage scanners plus a supporting endpoint-discovery pass after current ownership proof. Internal CSRF, authorization, and access-control logic require separate review. SQL-injection, reflected-XSS, and path-traversal probes are not enabled in the current production profile.