CVE-2026-113799

A flaw was found in slack-morphism. When signature verification fails for an incoming request, the library calculates the expected Hash-based Message Authentication Code HMAC signature and records it in error logs. An attacker with network access to the Slack callback endpoint and read access to...