CVE-2026-42142

TypeBot is a chatbot builder tool. Prior to version 3.17.0, the "handleGetSheets" API handler "POST /api/sheets/getSheets" does not validate workspace membership, allowing any authenticated user to access and decrypt another workspace's Google Sheets OAuth credentials and retrieve spreadsheet dat...