logo

Database

Easypost Api Key

Description

The source code repository contains sensitive information: EasyPost API Key

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    • Matches EasyPost API Key patterns in source code and configuration files

Vulnerable code example

EASYPOST_API_KEY=EZAKD6WzNtXJle7Qph4D5Y47PP6ANlUj41IJLNhsH8HZnPiCATX0yyyFjm
export EASYPOST_TEST_API_KEY="EZTKCXPO37VRtfZ6kbPbEHOkuBsXxRUrb1Io9Pv5Hcd1kADLqGZMmyAn4t"
client = easypost.EasyPostClient("EZAKvhJKqOC0PzNmGwnPZkAQJgjtOOrNvgOLtjCOKETWfXXEIrj3dmGsaj")
const client = new EasyPostClient('EZTKFCdA9URMftBqJBGg5TMW5oHGPHYFBVlsWaaiL4F5vuDtEtDzyCBa1N');
curl -X GET https://api.easypost.com/v2/addresses -u "EZAKRcnrKVjM7BmYW42RLSey1DCc673pKMavtD4zCxXqru1M4ZKM9mxyLX:"
  api_key: EZTKXHHy1uVk3pu3rJ8imdBXB4l3P48k2WKDUOoDbQPj3kMMsj7BmVWCsT
Authorization: Basic EZAKeHB0sVj7ymPXKCt2nqDZL72Ii48Gzr2qGgtQOAEjOi43gAszljbdYs:
EZAKieCDR6yZs7ioEE12iDdjkjdNIXSW5HM2BhC8tWpOeaG7MMTFJ3E6Xx