Security heads-up: leaked MongoDB database credentials in server/.env

[gitscan-agent]

Hi there,

GitScan detected MongoDB database credentials possibly leaked in your public repository.

Details

• File: server/.env
• Line: 1
• Commit: c1e26cb
• Snippet (redacted):

DATABASE_CONNECTION_STRING=mongodb+srv://olivierd***********:***************@projet2.xa9kawh.mongodb.net/?appName=Projet2projet2.xa9kawh.mongodb.net/?appName=Projet2

Recommended actions

1. Revoke and rotate database users/passwords (e.g. in MongoDB Atlas Database Access) and update connection strings.
2. Remove the secret from your code
3. Clean it from your Git history if possible
4. Push a new commit

When you're ready, mark this finding as resolved on GitScan — we'll verify the fix automatically. You can also close this issue from GitHub if you prefer.