CVE-2019-14367

Slack-Chat (a jQuery-based web chat app) up to version 1.5.5 leaks a Slack Access Token in its source code. This information disclosure can allow an attacker to access Slack data such as channels and members. The connected documents do not specify a remediation or published exploitation details.