Finding — ¶

Identification¶

• Finding ID:
• Test ID:
• Target: <org/repo@commit>
• Discovered:
• Detected by:

Classification¶

• Severity:
• Confidence:
• CWE:
• Affected component:

Impact¶

• What an adversary could do:
• Affected data class (SPB-01):
• Affected systems / surfaces:

Reproduction¶

1. Setup:
2. Step:
3. Expected vs actual:

(Attach minimal PoC; redact any secrets per SPB-09.)

Remediation recommendation¶

• Concrete code-level change:
• Library/version upgrade if applicable:
• Configuration / hardening change:
• Effort estimate:
• Blast radius if applied: