Airport group reportedly left API keys exposed in client-side JavaScript for four years
A security researcher claims an airport group exposed API keys in client-side JavaScript for four years. The supplied report does not specify the airports, scope of access or whether the keys were exploited.
By DoomRadar · Published on DoomRadar .
Why it matters
Exposed credentials could enable unauthorized access to airport-related systems or data, though the operational impact is not established.
Related source links
These links were collected with this event. Recorded source dates may reflect when a link was found. Article publication dates are shown only when available from the source. Open the originals for their full context.
- Security boffin claims airport group left API keys in client-side JavaScript for four years ↗theregister.com · Recorded source date: Sep 9, 2026, 3:17 PM UTC
AI-assisted, source-based analysis. Methodology · Report a correction