I’m willing to bet someone JSON.stringify’d the entire user object without realizing the password hash is in there

Slack

Slack App Leaked Hashed User Passwords for 5 YEARS

| | api, I’m willing to bet someone JSON.stringify’d the entire user object without realizing the password hash is in there, Password, Salesforce, SB Blogwatch, slack, slack technologies, Slack Vulnerability
Since 2017, if you’ve invited anyone to a Slack workspace, your password has leaked. How could this have happened? ...
Security Boulevard