Property
Languageregex
Severitylow
CWECWE-798: Use of Hard-coded Credentials
OWASPA07:2021 - Identification and Authentication Failures
Confidence LevelLow
Impact LevelMedium
Likelihood LevelLow

Description#

A PGP private key has been found directly in the codebase, which means sensitive cryptographic credentials are exposed. Private keys should never be hardcoded or stored in source control.

Impact#

If this private key is leaked, attackers could decrypt confidential data, impersonate users, or gain unauthorized access to secure systems, leading to data breaches or loss of trust.