Sample report

What a finding looks like

This is a static example, not a real scan. No customer data appears on this page.

SB-RLS-104

Table readable without a session

Act

supabase/migrations/0007_members.sql:12 · Querymeasured
select count(*) from members
→ 1,204 rows, as anon, no session

Rescan passedTypecheck passedTests passedPolicy tests passedProof of vulnerability not available

fix verified · PR #142 opened

STR-608

Webhook handler never verifies the signature

Attend

app/api/webhooks/stripe/route.ts:9 · HTTP 200measured
POST /api/webhooks/stripe (no stripe-signature header) → 200 ok

Rescan not availableTypecheck not availableTests not availablePolicy tests not availableProof of vulnerability not available

PR-only fix class · no template yet