Fyneex — Sécurité Vibe Coding | Audit automatisé du code IA

You are exploring the Fyneex demo. Data is fictional.

Create an account

Back to project

Completed

Score globalMoyen

Duration

11.2s

files analyzed

247 fichiers

Engine

Fyneex AI v2

Date

7 mars 2026 à 14:15

Evolution since last audit

Global+0

Sécu+0

Vitesse+0

Qualité+0

Optim+0

Infra+0

Issues detected

2 critical5 important8 minor

Fix estimate

~4h

2h security · 1h quality · 1h infra

Next steps

Fix detected XSS vulnerabilitiesEnable missing security headersUpdate vulnerable dependencies

Detected stack

Next.js 16React 19TypeScript 5Tailwind v4Prisma 7Supabase

35Sécurité

82Vitesse

60Qualité

50Optimisation

43Infrastructure

Security

5 points analyzed · 4 to fix

Supabase RLS PoliciesCritical

Diagnostic

12files analyzed

3problems found

3 tables sans politique RLS active (User, Project, Audit). Acces non restreint via Supabase client.

Impacted files

supabase/migrations/001_initial.sqlprisma/schema.prismalib/supabase/client.ts

Solution

Activez RLS sur chaque table et ajoutez des politiques : ALTER TABLE "User" ENABLE ROW LEVEL SECURITY; CREATE POLICY "Users can view own data" ON "User" FOR SELECT USING (auth.uid() = id); Repetez pour Project et Audit en filtrant par userId.

Headers HTTP de securiteCritical

Sentinel — Continuous Monitoring

Receive email alerts when your code quality regresses or when new CVE vulnerabilities are detected in your dependencies.

Score regression alerts

Notification if score drops by more than 5 points

Dependency CVE monitoring

Alert when a vulnerability is published for a used package

Weekly email report

Summary of changes every Monday

Slack alert

Notification in your Slack channel

Actions

Share report

Generate a public share link

Detected vulnerabilities (3)

Last check: 2 hours ago

Package	Version	Sévérité	CVE	Description	Source
next	14.1.0→14.2.3	HIGH	CVE-2024-34351	Server-Side Request Forgery in Server Actions	GHSA
postcss	8.4.31→8.4.38	MEDIUM	CVE-2023-44270	Line return parsing error leading to data exfiltration	GHSA
sharp	0.32.6→0.33.0	LOW	CVE-2024-29415	SSRF via crafted SVG input in image processing	GHSA

Audit history

March 15, 2026 at 09:12 AM

Sec 72Spd 89Qual 65Opt 78Infra 58

34.2sFyneex AI v2

March 7, 2026 at 02:15 PM

Current

Sec 35Spd 82Qual 60Opt 50Infra 43

11.2sFyneex AI v2

Impressed?

Launch your first audit for free.

Create a free account View pricing

Package

Version

Sévérité

CVE

Description

Source

next

14.1.0→14.2.3

HIGH

CVE-2024-34351

Server-Side Request Forgery in Server Actions

GHSA

postcss

8.4.31→8.4.38

MEDIUM

CVE-2023-44270

Line return parsing error leading to data exfiltration

GHSA

sharp

0.32.6→0.33.0

LOW

CVE-2024-29415

SSRF via crafted SVG input in image processing

GHSA

Audit result

Security

Sentinel — Continuous Monitoring

Actions

Detected vulnerabilities (3)

Audit history

Audit result

Security

Sentinel — Continuous Monitoring

Actions

Detected vulnerabilities (3)

Audit history