Slack Morphism Project maintains a specialized Scala library for programmatic interaction with the Slack API, with its vulnerability surface centered on information-disclosure issues including exposure of debug information, unintended leakage of sensitive data to unauthorized actors, and inadequate sanitization before storage or transmission. Treat this as a narrow, focused vendor profile; live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Slack Morphism Project over time
Signals from CVEs in this vendor scope (2 CVEs).
2 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-39292HIGH Slack Morphism is a modern client library for Slack Web/Events API/Socket Mode and Block Kit. Debug logs expose sensitive URLs for Slack webhooks that contain private information. | Oct 10, 2022 | 7.5 | 25 | NO | NO |
CVE-2022-31162HIGH Slack Morphism is an async client library for Rust. Prior to 0.41.0, it was possible for Slack OAuth client information to leak in application debug logs. Stricter and more secure | Jul 22, 2022 | 7.5 | 23 | NO | NO |
Signals from CVEs in this vendor scope (2 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Slack Morphism Project.
Media articles that mention a CVE ID that affects a product developed by Slack Morphism Project — matched by CVE ID, not by vendor name.