karantec / karantec/HospitalBackend

Security heads-up: leaked MongoDB database credentials in createAdmin.js

Open
#1 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
0
Forks
0
PR merge metrics
No merged PRs in 30d

Description

Hi there,

GitScan detected `MongoDB database credentials` possibly leaked in your public repository.

### Details

- **File**: [createAdmin.js](https://github.com/karantec/HospitalBackend/blob/4dfe7c98f2bc49c6a520d632a277f05dc742e1bc/createAdmin.js#L7)
- **Line**: 7
- **Commit**: [`4dfe7c9`](https://github.com/karantec/HospitalBackend/commit/4dfe7c98f2bc49c6a520d632a277f05dc742e1bc)
- **Snippet** (redacted):
```
"mongodb+srv://merndesi***********:****************@cluster0.c1gggji.mongodb.net/hospitalDB",cluster0.c1gggji.mongodb.net/hospitalDB",
```

### Recommended actions

1. **Revoke and rotate** database users/passwords (e.g. in [MongoDB Atlas](https://cloud.mongodb.com/) **Database Access**) and update connection strings.
2. Remove the secret from your code
3. Clean it from your Git history if possible
4. Push a new commit

When you're ready, **[mark this finding as resolved on GitScan](https://gitscan.ai/resolve?utm_source=issue&utm_medium=disclosure&utm_campaign=auto_issue&utm_content=mark_resolved&finding=gs_2b128af31ab715e9)** — we'll verify the fix automatically. You can also close this issue from GitHub if you prefer.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.