← Back to report

Investigate Database connection string with credentials

Build 5.3.0 · Scan 2026-10-08T17:04:24.271Z

1 distinct recorded findings; 1 have inspectable metadata. Locations are representative, not an inventory of every source match.

A database/broker connection string with an embedded username and password (Postgres/MySQL/MongoDB/Redis/AMQP). If the host is reachable, this is direct credentialed access to a backend datastore — treat as critical and rotate. It may also be a local/sample value, so confirm the host before acting.

Static evidence does not establish runtime impact. Source excerpts and line numbers were not recorded.

Evidence preview

Evidence type

Static string match

Representative location

_split_config.arm64_v8a/lib/arm64-v8a/libapp.so

Recorded match

•••••••• (40+ chars, redacted)

Detector rule

db_uri_creds

Recorded file locations

• _split_config.arm64_v8a/lib/arm64-v8a/libapp.so