Skip to content
security-recipes.ai
Quick Start
Fundamentals
Overview
Threat Model
Emerging Patterns
Docs
Overview
Integrate an AI Agent
Agents
Overview
GitHub Copilot
Devin
Cursor
Codex
Claude
Prompt Library
Overview
Claude
GitHub Copilot
Cursor
Codex
Devin
General
Reputable Sources
CVE Recipes
Classic Vulnerable Defaults
MCP Servers
Security Remediation
Overview
Reviewer Playbook
Gatekeeping Patterns
Runtime Controls
Compliance & Audit
Automation
Contribute
Jwt
JWT — `alg: none` and algorithm confusion
April 25, 2026