CVE-2025-60639

22th percentile - higher than 22% of all known CVEs

Hardcoded credentials were found in the ATLAS-EPIC source code in commit f29312c (2025-05-26). This means authentication data is directly embedded in the repository, readable by anyone with code access.

An attacker with access to the repository or compiled application can read these credentials and use them for unauthorized access to systems or data, potentially leading to confidentiality and integrity breaches.

Immediately remove hardcoded credentials from the source code, replace them with environment variables or a secure secrets manager, and rotate all compromised passwords and keys.