Tag API vulnerabilities