Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Your card balance is at risk, please read the issue #1

Open
agi1512 opened this issue Oct 6, 2024 · 0 comments
Open

Your card balance is at risk, please read the issue #1

agi1512 opened this issue Oct 6, 2024 · 0 comments

Comments

@agi1512
Copy link

agi1512 commented Oct 6, 2024

pod/.env

Lines 1 to 2 in 9a13958

ELEVENLABS_API_KEY=sk_1ae3fedead5c3e15ee6a5e0e0d660f7a21021ba045a575e7
OPENAI_API_KEY=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

Hello! It's of utmost importance that you invalidate your API keys.

I was doing security research and was able to find API keys in numerous of repositories. For most of them they are for non-paid subscriptions, so it's not as damaging, as your keys. I was able to check your eleven labs key and found by your subscription type that you are a creator-tier user and someone could use your key and even spend your credits. Please invalidate mentioned API key and, probably, OpenAI API key too.

Sorry for bringing it to the public domain through the issues, you are free to hide/delete it, if possible.

I'm an independent researcher and not in any way is connected to ElevenLabs and/or OpenAI. I'd also like to recommend you to leave somewhere at the bottom some contact info for your open-source projects. E-mail would suffice, so that any good samaritan can contact you about security breach not in the public field.

To exclude this issue from happening again you can fix your .gitignore, i see row with "env" here, it probably should be a ".env", or both, depending on settings.

P.S.
the code i used to check for subscription info:

client = ElevenLabs(
            api_key=key,
        )
print(client.user.get_subscription().__dict__)

Don't worry, this does not use your credits at all.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant