Security Audit Report

SECURITY-AUDIT-2026-01-26.pdf

3 findingsScanned Jan 26, 2026

undetected.today

App Router

3Low

Attack Surface

Routes

Query Params

Custom Headers

GET

POST

/api/auth/logout

GET

/api/auth/users/me

GET

/api/cheats

GET

/api/uploads/[file]

GET

/api/versions/current

GET

/api/versions/previous

GET

/dashboard

GET

/rdd

?binary?channel?hash?platform

GET

/ROOT

NEXT_DID_POSTPONE_HEADER

NEXT_REWRITTEN_QUERY_HEADER

NEXT_ROUTER_PREFETCH_HEADER

NEXT_ROUTER_SEGMENT_PREFETCH_HEADER

NEXT_ROUTER_STALE_TIME_HEADER

NEXT_ROUTER_STATE_TREE_HEADER

NEXT_RSC_UNION_QUERY

NEXT_URL

RSC_CONTENT_TYPE_HEADER

RSC_HEADER

X-XSRF-TOKEN

__next_hmr_refresh_hash__

next-action

next-hmr-refresh

next-router-prefetch

next-router-segment-prefetch

next-router-state-tree

next-url

rsc

x-action-revalidated

x-deployment-id

x-nextjs-action-not-found

x-nextjs-html-request-id

x-nextjs-postponed

x-nextjs-prerender

x-nextjs-request-id

x-nextjs-rewritten-path

x-nextjs-rewritten-query

x-nextjs-stale-time

Security Findings

LOW

Unauthenticated Endpoint: /api/cheats

Endpoint is accessible without authentication (HTTP 200)

Finding #1 of 3

Endpoint is accessible without authentication (HTTP 200)

Location

https://undetected.today/api/cheats

Remediation

Review if this endpoint should require authentication

LOW

Unauthenticated Endpoint: /api/versions/current

Endpoint is accessible without authentication (HTTP 200)

Finding #2 of 3

Endpoint is accessible without authentication (HTTP 200)

Location

https://undetected.today/api/versions/current

Remediation

Review if this endpoint should require authentication

LOW

Unauthenticated Endpoint: /api/versions/previous

Endpoint is accessible without authentication (HTTP 200)

Finding #3 of 3

Endpoint is accessible without authentication (HTTP 200)

Location

https://undetected.today/api/versions/previous

Remediation

Review if this endpoint should require authentication

undetected.today

Attack Surface

Routes (10)

Custom Headers (29)

Security Findings

Unauthenticated Endpoint: /api/cheats

Unauthenticated Endpoint: /api/versions/current

Unauthenticated Endpoint: /api/versions/previous