Documentation Index
Fetch the complete documentation index at: https://docs.unideploy.in/llms.txt
Use this file to discover all available pages before exploring further.
Severity levels
CRITICAL
An issue that can be exploited immediately with no special access. Examples:- A live API key committed to the repository and accessible via the GitHub API
- An auth guard that is inverted (
if (user)→ redirect instead ofif (!user)→ redirect) - A Supabase service role key used in client-side code
HIGH
An issue that significantly increases the attack surface but requires some specific conditions to exploit. Examples:- Row-level security enabled on a table but no policies defined (effectively open to anyone with the anon key)
- An API route that returns user data without checking authentication
- A
createBrowserClientcall inside a Next.js server component (leaks session data)
MEDIUM
An issue that represents a defence-in-depth gap. The app may not be immediately exploitable but is not following best practices. Examples:- Missing
Content-Security-Policyheader - A Stripe checkout flow without a server-side webhook for payment verification