Parseable before 2.9.2 contains an information disclosure vulnerability in the notification-target API endpoints that returns webhook tokens and basic-auth credentials in cleartext due to commented-out secret-masking fun…
CVSS 4.0HIGH 7.1·Network·Low privileges·No interaction·EPSS 0.00347·Published 2026-06-29·Fixed in 2.9.2CWE-522