Summary

Looks like your API is playing a game of "Who Can Rack Up the Most Security Issues?" with OWASP. They've got a solid lead with those error responses and rate limit problems. Time to tighten those bolts!