CVE-2026-113799

The Slack Morphism client library (versions 1.0.0 through 2.27.0 ) contains a vulnerability where signature verification failures disclose valid HMACs in application logs. Specifically, the slack-morphism library computes the correct signature for an attacker-controlled request body and stores it...