Tag API security vulnerabilities