logo

Database

Upstash Redis Token

Description

The source code repository contains sensitive information: Upstash Redis Token

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    • Matches Upstash Redis Token patterns in source code and configuration files

Vulnerable code example

UPSTASH_REDIS_REST_TOKEN=AYNgASQgZjE4YjYxNjItM2ZmNC00YTU2LWI4ZDctOWNmNmQ3N2E1YzRkM2U5
export UPSTASH_REDIS_REST_TOKEN='AYNgASQgZjE4YjYxNjItM2ZmNC00YTU2LWI4ZDctOWNmNmQ3N2E1YzRkM2U5='
upstashRedisRestToken: "AYNgASQgZjE4YjYxNjItM2ZmNC00YTU2LWI4ZDctOWNmNmQ3N2E1YzRkM2U5"
const redis = new Redis({
  url: "https://us1-merry-cat-32748.upstash.io",
  token: "AYNgASQgZjE4YjYxNjItM2ZmNC00YTU2LWI4ZDctOWNmNmQ3N2E1YzRkM2U5",
})
redis = Redis(url="https://eu2-steady-cobra-12345.upstash.io", token="AYNgASQgZjE4YjYxNjItM2ZmNC00YTU2LWI4ZDctOWNmNmQ3N2E1YzRkM2U5")...