https://goodcatch.dev/blog Writing from Goodcatch. en https://goodcatch.dev/blog/security-issues-junior-developers-most-often-miss-in-pull-requests https://goodcatch.dev/blog/security-issues-junior-developers-most-often-miss-in-pull-requests Fri, 25 Sep 2026 19:00:03 +0000 Security bugs don't look broken. They hide inside clean, idiomatic code that works perfectly for the expected caller. Here are four vulnerability patterns that consistently slip through junior code reviews, and the specific habits that catch each one. https://goodcatch.dev/blog/how-to-spot-logic-bugs-in-a-pull-request-before-they-hit-production https://goodcatch.dev/blog/how-to-spot-logic-bugs-in-a-pull-request-before-they-hit-production Wed, 23 Sep 2026 15:00:01 +0000 Logic bugs survive code review because they don't look wrong. Here's a practical method for catching them at the edges, plus how to build the pattern-recognition that makes it reliable.