Denial-of-service in modern frameworks: Fastify OOM, quadratic CPU on Django ASGI, GraphQL aliasing and decompression bombs. Well-written DoS reports do get paid.
