Exposure DB
1,048 exposure sites - every place a customer-controlled credential or secret can leak - each mapped to the edge it emits, its collection recipe, and what leaks.
406
aws
377
azure
265
gcp
563
critical severity
250
medium severity
233
high severity
2
low severity
aiplatform.projects.locations.publishers.models.generateContent.candidates[].content.parts[] - leaks credential, customer_data, pii, sensitive_data
aiplatform.projects.locations.pipelineJobs.get.runtimeConfig.{parameterValues,inputArtifacts} - leaks credential, customer_data, pii, sensitive_data
aiplatform.projects.locations.customJobs.get.labels.<value> - leaks credential, api_key, sensitive_data, pii
compute.networks.get.description - leaks credential, api_key, sensitive_data, pii
compute.subnetworks.get.description - leaks credential, api_key, sensitive_data, pii
iam.projects.locations.workloadIdentityPools.get.{displayName,description} - leaks credential, api_key, sensitive_data, pii
iam.projects.locations.workloadIdentityPools.providers.get.attributeCondition - leaks credential, api_key, sensitive_data, pii
iam.projects.locations.workloadIdentityPools.providers.get.attributeMapping - leaks sensitive_data, pii
iam.projects.locations.workloadIdentityPools.providers.get.{oidc.issuerUri,oidc.allowedAudiences[],aws.accountId,saml.idpMetadataXml} - leaks certificate, sensitive_data
workflows.projects.locations.workflows.get.{description,labels.<value>} - leaks credential, api_key, sensitive_data, pii