Why Cursor Writes IDOR Into Your API Routes (CWE-639) July 28, 2026 · Dev.to Read full story at source