The Airbrake Ruby notifier 4.2.3 for Airbrake mishandles the blacklist_keys configuration option and consequently may disclose passwords to unauthorized actors.
CVSS 3.0CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.01442·Published 2019-09-06·Fixed in 4.2.4CWE-200