karantec / karantec/HospitalBackend
Security heads-up: leaked MongoDB database credentials in createAdmin.js
- Dominant language
- JavaScript
- Stars
- 0
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Description
Hi there,
GitScan detected `MongoDB database credentials` possibly leaked in your public repository.
### Details
- **File**: [createAdmin.js](https://github.com/karantec/HospitalBackend/blob/4dfe7c98f2bc49c6a520d632a277f05dc742e1bc/createAdmin.js#L7)
- **Line**: 7
- **Commit**: [`4dfe7c9`](https://github.com/karantec/HospitalBackend/commit/4dfe7c98f2bc49c6a520d632a277f05dc742e1bc)
- **Snippet** (redacted):
```
"mongodb+srv://merndesi***********:****************@cluster0.c1gggji.mongodb.net/hospitalDB",cluster0.c1gggji.mongodb.net/hospitalDB",
```
### Recommended actions
1. **Revoke and rotate** database users/passwords (e.g. in [MongoDB Atlas](https://cloud.mongodb.com/) **Database Access**) and update connection strings.
2. Remove the secret from your code
3. Clean it from your Git history if possible
4. Push a new commit
When you're ready, **[mark this finding as resolved on GitScan](https://gitscan.ai/resolve?utm_source=issue&utm_medium=disclosure&utm_campaign=auto_issue&utm_content=mark_resolved&finding=gs_2b128af31ab715e9)** — we'll verify the fix automatically. You can also close this issue from GitHub if you prefer.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.