Credentials are stored or transmitted without adequate protection, so they can be intercepted or read.
Upgrade, rotate the exposed credentials, and store them hashed/encrypted.
Never log or store credentials in plaintext; use a secret manager and strong hashing.
Stateward flags Insufficiently Protected Credentials in your own code and dependencies on every pull request.
Scan my repoSources: CISA KEV (public domain), OSV.dev & GitHub Advisory Database (CC-BY-4.0), FIRST EPSS, NVD/CWE (public domain). Served live from the Stateward advisory database.