nock
/
engagements
/
acme-web
/
findings
op/jbell
sign out
console
assets
repeater
findings
report
phase
testing
rate
10/s
window ends
2026-10-09
status
running
halt
all
6
open
4
triaged
1
fixed
1
junk
1
@
1
critical
%
1
high
*
2
medium
-
1
low
.
1
info
severity
ref
finding
location
status
@
critical
F-001
Order lookup returns other customers' orders
GET /api/orders/:id
open
%
high
F-002
Avatar import fetches internal addresses
POST /api/users/:id/avatar
triaged
*
medium
F-003
Session cookie lacks Secure and SameSite
POST /login
open
*
medium
F-004
Search query reflected unencoded in error page
GET /search
open
-
low
F-005
Stack traces on malformed JSON
POST /api/orders
fixed
.
info
F-006
Server versions in response headers
*
open