Security Report for datafetcher.io | Grade D | Hardenly

Security Audit Report

SECURITY-AUDIT-2026-04-09.pdf

1 findingsScanned Apr 9, 2026

datafetcher.io

D

Pages Router

1High

Attack Surface

71

Routes

0

Query Params

0

Custom Headers

UNKNOWN

/

UNKNOWN

/about

UNKNOWN

/admin

UNKNOWN

/airtable-automation

UNKNOWN

/airtable-charts

UNKNOWN

/airtable-dashboards

UNKNOWN

/airtable-etl

GET

/airtable-generative-ai

UNKNOWN

/airtable-import

UNKNOWN

/airtable-import/[slug]

GET

/airtable-import/csv

GET

/airtable-import/google-sheets

GET

/airtable-import/json

GET

/airtable-import/xml

GET

/airtable-integrations

UNKNOWN

/airtable-integrations/[id]

GET

/airtable-integrations/airtable

GET

/airtable-integrations/anthropic-claude

GET

/airtable-integrations/api

GET

/airtable-integrations/apify

GET

/airtable-integrations/currency-conversion

GET

/airtable-integrations/deepseek

GET

/airtable-integrations/facebook-instagram-ads

GET

/airtable-integrations/facebook-lead-ads

GET

/airtable-integrations/google-ads

GET

/airtable-integrations/google-ai-studio-gemini

GET

/airtable-integrations/google-analytics-4

GET

/airtable-integrations/google-maps

GET

/airtable-integrations/google-search-console

GET

/airtable-integrations/google-sheets

GET

/airtable-integrations/graphql

GET

/airtable-integrations/instagram-insights

GET

/airtable-integrations/json

GET

/airtable-integrations/linkedin-data-api

GET

/airtable-integrations/ocr

GET

/airtable-integrations/openai-chatgpt

GET

/airtable-integrations/parsehub

GET

/airtable-integrations/pipedrive

GET

/airtable-integrations/stripe

GET

/airtable-integrations/xero

UNKNOWN

/airtable-reports

UNKNOWN

/api

UNKNOWN

/api/event

UNKNOWN

/auth

UNKNOWN

/auth/google

UNKNOWN

/aws-signature-version-4-calculator

UNKNOWN

/basic-authentication-header-generator

UNKNOWN

/blog

UNKNOWN

/blog/[slug]

UNKNOWN

/checkout

UNKNOWN

/contact

UNKNOWN

/customers

UNKNOWN

/customers/[slug]

UNKNOWN

/graphql-json-body-converter

UNKNOWN

/javascript-formula-playground

UNKNOWN

/pick-google-drive-file

GET

/pricing

UNKNOWN

/privacy

UNKNOWN

/profile

GET

/profile/[dynamic]

UNKNOWN

/profile/[id]

UNKNOWN

/profile/[id]/requests

UNKNOWN

/profile/[id]/runs

UNKNOWN

/reset-password

UNKNOWN

/sign-in

UNKNOWN

/terms

UNKNOWN

/unsubscribe/[id]

UNKNOWN

/upgrade

UNKNOWN

/use-cases

UNKNOWN

/use-cases/[slug]

UNKNOWN

/xero/connected

Security Findings

1 finding redacted

HIGH

Cross-site scripting vulnerability

User input rendered without proper sanitization.

#1 of 1

Other Recent Reports