Exposure DB
1,048 exposure sites - every place a customer-controlled credential or secret can leak - each mapped to the edge it emits, its collection recipe, and what leaks.
406
aws
377
azure
265
gcp
563
critical severity
250
medium severity
233
high severity
2
low severity
aiplatform.projects.locations.customJobs.get.jobSpec.workerPoolSpecs[].pythonPackageSpec.env[].value - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string
aiplatform.projects.locations.publishers.models.generateContent.request.{contents[].parts[],systemInstruction.parts[],tools[]} - leaks credential, password, api_key, oauth_token, customer_data, pii, sensitive_data
aiplatform.projects.locations.publishers.models.generateContent.request.tools[].{exaAiSearch.apiKey,parallelAiSearch.apiKey,retrieval.externalApi.apiAuth.apiKeyConfig.apiKeyString,retrieval.externalApi.authConfig.apiKeyConfig.apiKeyString,retrieval.externalApi.authConfig.oauthConfig.accessToken,retrieval.externalApi.authConfig.oidcConfig.idToken} - leaks api_key, oauth_token, bearer_token, credential
aiplatform.projects.locations.models.get.containerSpec.env[].value - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string
aiplatform.projects.locations.deploy.request.modelConfig.huggingFaceAccessToken - leaks access_key, bearer_token, credential
aiplatform.projects.locations.notebookRuntimeTemplates.get.softwareConfig.env[].value - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string
aiplatform.projects.locations.pipelineJobs.get.pipelineSpec - leaks source_code_secret, credential, password, api_key, private_key, connection_string
aiplatform.projects.locations.ragCorpora.ragFiles.import.request.importRagFilesConfig.sharePointSources.sharePointSources[].clientSecret.apiKeyString - leaks secret_key, api_key, credential
aiplatform.projects.locations.reasoningEngines.get.spec.deploymentSpec.env[].value - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string
notebooks.projects.locations.instances.get.containerImage.repository/metadata.items or postStartupScript - leaks source_code_secret, credential, password, api_key, private_key
iam.locations.workforcePools.providers.create/iam.locations.workforcePools.providers.patch.request.{extendedAttributesOauth2Client,extraAttributesOauth2Client}.clientSecret.value.plainText - leaks oauth_token, secret_key, credential
iam.locations.workforcePools.providers.create/iam.locations.workforcePools.providers.patch.request.oidc.clientSecret.value.plainText - leaks oauth_token, secret_key, credential
workflows.projects.locations.workflows.get.sourceContents - leaks source_code_secret, credential, password, api_key, private_key, connection_string
workflows.projects.locations.workflows.get.userEnvVars.<value> - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string