Skip to content

Hardcoded default root/qwerty DB password and bot token in config #1

Open
Open
Hardcoded default root/qwerty DB password and bot token in config#1
@consigcody94

Description

@consigcody94
consigcody94
opened on Apr 6, 2026

Found via code audit. src/common/config.py:31. Fallback defaults are qwerty and placeholder bot token. Fix: Refuse to start if env vars not set.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions