Security missconfiguration vulnerability

[HemalKp]

Want to ask that is the crAPI have security missconfiguration vulnerability

[piyushroshan]

Yes it does. .env file leak, embedded harcoded jwks keys, default users.