@misc{indiciae4cca604f41d6, title = {Broken Object Level Authorization in the Wild: An Empirical Taxonomy from 100+ Bug Bounty Disclosures}, author = {Bandana Kaur}, year = {2026}, url = {https://arxiv.org/abs/2605.25865}, note = {Source identifier: 2605.25865} }