Estimating the potential impact of security vulnerability is harder than you might think. Few of the steps to mitigate are outlined here in this post.
- The input data meant to be consumed by your app be validated for invalid data formats. Example: If it is json then have schema. Mark data as optional or have valid filters, max lengths etc.
- The libraries you need their versions are free of vulnerabilities. Or upgrade them. Example: use OWASP Top 10 tool and others.
- Build security around your app. Example: follow OAuth tokens, encryption with cryptography.
- Error and Exception Handling: Make your app robust to handle errors gracefully.
- Logging and Tracing: Use Logging to log error and exception messages.