abdolence CVE debriefs

CVE-2026-113799

Slack Morphism verifier errors disclose valid HMACs in logs. For invalid requests, slack-morphism computes the correct signature and stores it in SlackEventWrongSignatureError.generated_hash. The error's Debug and Display representations expose that value, logged at error level by the default Axum listener error handler. An attacker reaching the Slack callback endpoint and reading application/service logs [truncated]