Vulnerabilities in JSON:API software