Sample Vulnerability Report

Sample report

Example data — this is what your report looks like, including AI-suggested fixes. Connect a repo to scan your own code.

acme-inc/checkout-service

Security Score

CFair

7 findings across this scan

Findings

Critical2

High2

Medium2

Low1

Top files

app/api/orders.py1

app/config/payments.ts1

src/routes/invoices.js1

src/components/SearchResults.tsx1

src/lib/auth.js1

Standards triggered

OWASP Top 106

Injection

PCI DSS v4.01

Secure development

SOC 21

Access control

NIST 800-63B1

Cryptography

	Date	CVE / CWE	Name	Score	Details
	5/30/2026	CWE-89	SQL injection via string-interpolated query CWE-89 · 5/30/2026	9.5	Visit
Category:Injection Type:SAST Rule:python.sqlalchemy.sql-injection User-controlled `customer_id` is concatenated directly into a raw SQL string. An attacker can read or modify arbitrary rows by injecting SQL through the request parameter. app/api/orders.py:64 AI-suggested fixpython Open as PR Use a parameterized query so user input is bound, never interpolated. `def get_orders(customer_id: str):- query = f"SELECT * FROM orders WHERE customer_id = '{customer_id}'"- return db.execute(query).fetchall()+ query = "SELECT * FROM orders WHERE customer_id = :cid"+ return db.execute(query, {"cid": customer_id}).fetchall()` Compliance Impact OWASP Top 10A03 A03:2021 – Injection PCI DSS v4.06.2.4 Requirement 6.2.4 – protect against injection attacks
	6/2/2026	CWE-798	Hardcoded API secret committed to source CWE-798 · 6/2/2026	9.5	Visit
	5/21/2026	CWE-639	Broken access control — missing ownership check CWE-639 · 5/21/2026	7.8	Visit
	5/18/2026	CWE-79	Reflected XSS in search results page CWE-79 · 5/18/2026	7.8	Visit
	4/29/2026	CWE-327	Weak hashing algorithm (MD5) for passwords CWE-327 · 4/29/2026	5.5	Visit
	3/11/2026	CVE-2021-23337	Vulnerable dependency: lodash < 4.17.21 (prototype pollution) CVE-2021-23337 · 3/11/2026	5.5	Visit
	2/8/2026	CWE-614	Missing secure & httpOnly flags on session cookie CWE-614 · 2/8/2026	3.2	Visit

This is example data. Connect your GitHub repo to get a real report like this — with AI-suggested fixes — in about 60 seconds.