I’m harvesting credit card numbers and passwords from your site. Here’s how.

This is old and I’ve read it before, but it’s still an excellent and thought-provoking article on web security when you have dependencies.