{"uuid": "09ff32f6-fb2c-46d5-9a1a-319f4247d2a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105763", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx64sa6oey2j", "content": "CRITICAL: twentyhq twenty (v1.20.10 \u2013 2.7.0) leaks plaintext IMAP/SMTP/CalDAV creds via GraphQL. Any workspace member can access others' credentials. Update to 2.7.0 ASAP. https://radar.offseq.com/threat/cve-2026-105763-cwe-522-insufficiently-protected-credentials-in-twentyhq-twenty-8c5491429285a...", "creation_timestamp": "2026-10-06T00:00:42.341007Z"}