What are common vulnerabilities in ChatGPT code?

The most frequent vulnerabilities in ChatGPT-generated code include SQL injection from string-concatenated queries, cross-site scripting from unsanitized output rendering, hardcoded API keys and credentials, missing CSRF protection, insecure direct object references, and broken access control logic. ChatGPT also tends to generate overly permissive CORS configurations, skip rate limiting, and use outdated libraries. UNPWNED's 721-check full suite spans 36 scanners after current ownership proof plus explicit active-testing authorization.