Deterministic sample

See a proven finding before you connect anything

This read-only fixture shows the structure of a Vlnry report: validated evidence, a reproducible path, remediation, and the immutable model snapshot used for the run.

No scan happens on this page

The sample is static. It accepts no URL, repository, email, target, or model credential and performs no network request.

Validated finding

SQL injection in coupon lookup

HighExploited and validated

server/src/routes/coupons.ts:42

Source path

The coupon handler concatenates an untrusted code value into a database query.

Exploit evidence

A controlled request returned coupon records outside the requested code inside the isolated sample run.

Reproduce safely

Use the recorded request against an authorized non-production target and confirm that unrelated rows are returned.

Remediation

Replace string concatenation with a prepared statement, validate the code shape, and add a regression test for the exploit input.

Reproducibility

The run configuration stays attached to the report

Profile

Illustrative sample profile

Model family

Customer-selected family

Compatibility

Illustrative — not a live status

Catalog revision

sample-2026-07

These values are fixture data, not a live certification claim. Production reports retain the exact profile, model IDs, catalog revision, credential revision, and repository commit used by that run.

Get started