Skip to content

[MEDIUM] [Security] Insecure Default Database Credentials #174

@bigtcze

Description

@bigtcze

Severity: Medium
Description: The database connection logic uses hardcoded default credentials (noteer / noteer) when environment variables are missing. This poses a risk if the application is deployed without explicit configuration.
Complexity: 2
Permalink: https://github.com/bigtcze/noteer/blob/main/backend/src/db/index.js#L52-L56

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions