<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
<url>
<loc>https://justappsec.com/</loc>
<changefreq>weekly</changefreq>
<priority>1</priority>
</url>
<url>
<loc>https://justappsec.com/cves</loc>
<changefreq>daily</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/guides</loc>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/scorecard</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/contact</loc>
<changefreq>yearly</changefreq>
<priority>0.3</priority>
</url>
<url>
<loc>https://justappsec.com/privacy</loc>
<changefreq>yearly</changefreq>
<priority>0.2</priority>
</url>
<url>
<loc>https://justappsec.com/responsible-disclosure</loc>
<changefreq>yearly</changefreq>
<priority>0.3</priority>
</url>
<url>
<loc>https://justappsec.com/threat-model</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://justappsec.com/threat-model/schema</loc>
<changefreq>monthly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://justappsec.com/llms.txt</loc>
<changefreq>weekly</changefreq>
<priority>0.3</priority>
</url>
<url>
<loc>https://justappsec.com/news</loc>
<lastmod>2026-05-13T00:00:00.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://justappsec.com/research</loc>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://justappsec.com/training</loc>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/news/2026-05-infusedwoo-unauth-auto-login-priv-esc</loc>
<lastmod>2026-05-13T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://justappsec.com/news/2026-05-daybreak-agentic-vuln-scans</loc>
<lastmod>2026-05-12T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://justappsec.com/news/2026-05-checkmarx-jenkins-ast-plugin-rogue-release</loc>
<lastmod>2026-05-11T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://justappsec.com/news/2026-05-tanstack-npm-mini-shai-hulud-supply-chain</loc>
<lastmod>2026-05-12T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://justappsec.com/news/2026-05-php-soap-apache-map-uaf-rce</loc>
<lastmod>2026-05-10T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://justappsec.com/news/2026-05-argo-template-restriction-bypass</loc>
<lastmod>2026-05-09T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://justappsec.com/news/2026-05-axios-http-adapter-prototype-pollution</loc>
<lastmod>2026-05-08T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://justappsec.com/news/2026-05-spring-cloud-config-traversal</loc>
<lastmod>2026-05-06T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://justappsec.com/news/2026-05-github-mcp-secret-scanning-ga</loc>
<lastmod>2026-05-05T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://justappsec.com/news/2026-05-nex-forms-unauth-stored-xss-post-key-names</loc>
<lastmod>2026-05-03T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://justappsec.com/news/2026-05-phantomraven-wave-5-npm-rdd</loc>
<lastmod>2026-05-03T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://justappsec.com/news/2026-05-starlet-request-smuggling</loc>
<lastmod>2026-05-03T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://justappsec.com/news/2026-05-argocd-serversidediff-secret-leak</loc>
<lastmod>2026-05-02T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://justappsec.com/news/2026-05-circleci-fork-pr-secret-exposure</loc>
<lastmod>2026-05-02T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://justappsec.com/news/2026-05-cpanel-auth-bypass-sorry-ransomware</loc>
<lastmod>2026-05-02T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://justappsec.com/news/2026-05-pmpro-stripe-webhook-ajax-authorization</loc>
<lastmod>2026-05-02T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://justappsec.com/news/2026-05-polaris-s3-wildcard-credential-scope-bypass</loc>
<lastmod>2026-05-02T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://justappsec.com/news/2026-05-profile-builder-pro-unauth-object-injection</loc>
<lastmod>2026-05-02T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://justappsec.com/news/2026-05-salon-booking-system-unauth-file-read</loc>
<lastmod>2026-05-02T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://justappsec.com/news/2026-05-user-verification-otp-bypass</loc>
<lastmod>2026-05-02T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://justappsec.com/news/2026-05-wcfm-vendor-idor-user-deletion</loc>
<lastmod>2026-05-02T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://justappsec.com/news/2026-05-widget-options-display-logic-eval-rce</loc>
<lastmod>2026-05-02T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://justappsec.com/news/2026-05-wordpress-uraf-unauth-file-upload</loc>
<lastmod>2026-05-02T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://justappsec.com/news/2026-05-apache-mina-deserialization-allowlist-bypass-take-2</loc>
<lastmod>2026-05-01T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://justappsec.com/news/2026-05-apache-neethi-ws-policy-normalization-dos</loc>
<lastmod>2026-05-01T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://justappsec.com/news/2026-05-bandit-permessage-deflate-oom-dos</loc>
<lastmod>2026-05-01T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://justappsec.com/news/2026-05-bandit-websocket-fragment-reassembly-dos</loc>
<lastmod>2026-05-01T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://justappsec.com/news/2026-05-bitwarden-cli-npm-worm-like-supply-chain</loc>
<lastmod>2026-05-01T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://justappsec.com/news/2026-05-canonical-ubuntu-ddos-outage</loc>
<lastmod>2026-05-01T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://justappsec.com/news/2026-05-copy-fail-linux-lpe-page-cache</loc>
<lastmod>2026-05-01T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://justappsec.com/news/2026-05-gravityforms-product-option-stored-xss</loc>
<lastmod>2026-05-02T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://justappsec.com/news/2026-05-intercom-php-supply-chain-compromise</loc>
<lastmod>2026-05-01T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://justappsec.com/news/2026-05-keystone-ec2-credential-cross-project-scope</loc>
<lastmod>2026-05-01T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://justappsec.com/news/2026-05-laboneq-unsafe-deserialization-rce</loc>
<lastmod>2026-05-01T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://justappsec.com/news/2026-05-pypi-audit-access-control-fixes</loc>
<lastmod>2026-05-01T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2026-6670</loc>
<lastmod>2026-05-14T06:44:14.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2026-6252</loc>
<lastmod>2026-05-14T06:44:13.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2026-3718</loc>
<lastmod>2026-05-14T06:44:13.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2026-3694</loc>
<lastmod>2026-05-14T06:44:12.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2026-5395</loc>
<lastmod>2026-05-14T06:44:12.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2026-5365</loc>
<lastmod>2026-05-14T06:44:11.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2026-6506</loc>
<lastmod>2026-05-14T06:44:11.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2026-6225</loc>
<lastmod>2026-05-14T06:44:10.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2026-3892</loc>
<lastmod>2026-05-14T06:44:10.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2026-5193</loc>
<lastmod>2026-05-14T06:44:10.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2026-6510</loc>
<lastmod>2026-05-14T06:44:09.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2026-6271</loc>
<lastmod>2026-05-14T06:44:08.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2025-12669</loc>
<lastmod>2026-05-14T05:38:37.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2025-13874</loc>
<lastmod>2026-05-14T05:38:27.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2025-14869</loc>
<lastmod>2026-05-14T05:38:02.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2025-14870</loc>
<lastmod>2026-05-14T05:37:32.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2026-1184</loc>
<lastmod>2026-05-14T05:37:02.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2026-1322</loc>
<lastmod>2026-05-14T05:36:47.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2026-1338</loc>
<lastmod>2026-05-14T05:36:42.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2026-1659</loc>
<lastmod>2026-05-14T05:36:32.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2026-3073</loc>
<lastmod>2026-05-14T05:36:12.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2026-3074</loc>
<lastmod>2026-05-14T05:36:02.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2026-3160</loc>
<lastmod>2026-05-14T05:35:57.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2026-3607</loc>
<lastmod>2026-05-14T05:35:42.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2026-4524</loc>
<lastmod>2026-05-14T05:34:52.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2026-4527</loc>
<lastmod>2026-05-14T05:34:32.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2026-6063</loc>
<lastmod>2026-05-14T05:34:12.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2026-6073</loc>
<lastmod>2026-05-14T05:34:07.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2026-6335</loc>
<lastmod>2026-05-14T05:33:57.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2026-7377</loc>
<lastmod>2026-05-14T05:33:42.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2026-7481</loc>
<lastmod>2026-05-14T05:33:32.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2026-8280</loc>
<lastmod>2026-05-14T05:33:22.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2026-8144</loc>
<lastmod>2026-05-14T05:33:17.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2025-15345</loc>
<lastmod>2026-05-14T05:30:29.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2026-3829</loc>
<lastmod>2026-05-14T05:30:29.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2026-8181</loc>
<lastmod>2026-05-14T05:30:29.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2026-5396</loc>
<lastmod>2026-05-14T05:30:28.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2026-6417</loc>
<lastmod>2026-05-14T05:30:28.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2026-5243</loc>
<lastmod>2026-05-14T05:30:27.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2026-5361</loc>
<lastmod>2026-05-14T03:27:15.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2026-7648</loc>
<lastmod>2026-05-14T03:27:14.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2026-7525</loc>
<lastmod>2026-05-14T03:27:14.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2026-46446</loc>
<lastmod>2026-05-14T03:19:17.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2026-46445</loc>
<lastmod>2026-05-14T03:19:37.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2026-5486</loc>
<lastmod>2026-05-14T02:26:39.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2026-46419</loc>
<lastmod>2026-05-14T02:06:22.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2026-44919</loc>
<lastmod>2026-05-14T01:31:10.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2026-41281</loc>
<lastmod>2026-05-13T23:06:57.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2026-29206</loc>
<lastmod>2026-05-13T22:07:16.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/CVE-2026-32991</loc>
<lastmod>2026-05-13T22:07:16.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/research/authentication</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/research/business-logic-abuse</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/research/command-injection</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/research/cross-origin-resource-sharing</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/research/cross-site-request-forgery</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/research/cross-site-scripting</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/research/file-upload-security</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/research/insecure-direct-object-references</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/research/json-web-tokens</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/research/mass-assignment</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/research/password-storage</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/research/path-traversal</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/research/prompt-injection</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/research/prototype-pollution</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/research/row-level-security-patterns-for-postgres</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/research/secure-software-development-lifecycle</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/research/server-side-request-forgery</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/research/session-management</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/research/sql-injection</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/research/template-injection</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/research/threat-modeling</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/guides/automated-threat-model-updates</loc>
<lastmod>2026-05-01T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/guides/dora-secure-sdlc-for-development-teams</loc>
<lastmod>2026-04-24T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/guides/nis2-for-development-teams</loc>
<lastmod>2026-04-24T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/guides/communicating-appsec-risk-to-leadership</loc>
<lastmod>2026-03-23T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/guides/cyber-essentials-for-development-teams</loc>
<lastmod>2026-03-23T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/guides/supply-chain-security-fundamentals</loc>
<lastmod>2026-03-23T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/guides/api-key-security-best-practices</loc>
<lastmod>2026-03-04T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/guides/how-to-secure-nextjs</loc>
<lastmod>2026-03-04T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/guides/jwt-security-best-practices</loc>
<lastmod>2026-03-04T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/guides/llm-tool-calling-security</loc>
<lastmod>2026-03-04T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/guides/mtls-vs-jwt-vs-oauth-for-service-auth</loc>
<lastmod>2026-03-04T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/guides/nextjs-csp-configuration</loc>
<lastmod>2026-03-04T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/guides/nextjs-security-checklist</loc>
<lastmod>2026-03-04T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/guides/nextjs-ssrf-protection</loc>
<lastmod>2026-03-04T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/guides/oauth-2-security-best-practices</loc>
<lastmod>2026-03-04T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/guides/prompt-injection-prevention</loc>
<lastmod>2026-03-04T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/guides/rate-limiting-in-nodejs</loc>
<lastmod>2026-03-04T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/guides/secrets-management-in-github-actions</loc>
<lastmod>2026-03-04T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/guides/secure-file-uploads-in-nodejs</loc>
<lastmod>2026-03-04T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/guides/secure-password-storage-bcrypt-vs-argon2</loc>
<lastmod>2026-03-04T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/guides/secure-session-management</loc>
<lastmod>2026-03-04T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/guides/secure-webhook-verification</loc>
<lastmod>2026-03-04T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/guides/securing-rag-pipelines</loc>
<lastmod>2026-03-04T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/guides/service-to-service-authentication-best-practices</loc>
<lastmod>2026-03-04T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/guides/sql-injection-prevention-with-prisma</loc>
<lastmod>2026-03-04T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/guides/webhook-replay-attack-protection</loc>
<lastmod>2026-03-04T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://justappsec.com/training/thinking-like-an-attacker</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/training/code-review-for-security</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/training/web-application-testing</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/training/api-security-testing</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/training/bug-bounty-and-responsible-disclosure</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/training/red-team-basics-for-builders</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/training/secure-defaults-in-modern-frameworks</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/training/api-design-that-defends-itself</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/training/data-protection-and-encryption</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/training/secrets-management</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/training/microservice-and-serverless-boundaries</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/training/ai-integration-security</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/training/injection-today</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/training/xss-in-modern-frameworks</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/training/authentication-patterns</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/training/authorisation-and-access-control</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/training/session-management</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/training/secure-file-handling</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/training/input-validation-and-schema-enforcement</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/training/ssrf-and-request-forgery</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/training/logging-and-detection-engineering</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/training/monitoring-and-alerting-for-security-events</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/training/incident-response-for-teams-that-ship-daily</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/training/vulnerability-management</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/training/waf-cdn-and-edge-security</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/training/compliance-as-code</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/training/cicd-pipeline-security</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/training/dependency-and-supply-chain-management</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/training/container-and-image-security</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/training/infrastructure-as-code</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/training/secrets-in-pipelines</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/training/artifact-signing-and-provenance</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/training/security-mindset-for-developers</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/training/threat-modelling-without-the-ceremony</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/training/attack-surface-of-a-modern-web-app</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/training/trust-boundaries-and-data-flow</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/training/bridging-dev-and-security-teams</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://justappsec.com/training/labs/xss-encoding</loc>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
</urlset>
