OWASP top 10 2021 ( update coming in 2025 )

https://owasp.org/www-project-top-ten/

1 Broken Access Control
2 Cryptographic Failures
3 Injection
4 Insecure Design
5 Security Misconfigurations
6 Vulnerable/ Outdated Components
7 Identification and Authentication Failures
8 Software and Data Integrity Failures
9 Security Logging and Monitoring Failures
10 SSRF

• have you considered or tried each one?