Slack Morphism verifier errors disclose valid HMACs in the logs

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-113799 · Microsoft / collected KEV context

EUVD-2026-107388

GHSA-26w4-8w32-4x3v

cve-program · CVE-2026-113799

• https://github.com/abdolence/slack-morphism-rust/security/advisories/GHSA-26w4-8w32-4x3v
• https://github.com/abdolence/slack-morphism-rust/pull/387
• https://github.com/abdolence/slack-morphism-rust/commit/ac95d0d4539d0eac548a8db99c51c0c1ae832756
• https://github.com/abdolence/slack-morphism-rust/releases/tag/v2.28.0

euvd · EUVD-2026-107388

• https://github.com/abdolence/slack-morphism-rust/security/advisories/GHSA-26w4-8w32-4x3v
• https://github.com/abdolence/slack-morphism-rust/pull/387
• https://github.com/abdolence/slack-morphism-rust/commit/ac95d0d4539d0eac548a8db99c51c0c1ae832756
• https://github.com/abdolence/slack-morphism-rust/releases/tag/v2.28.0

nvd · CVE-2026-113799

• https://github.com/abdolence/slack-morphism-rust/commit/ac95d0d4539d0eac548a8db99c51c0c1ae832756
• https://github.com/abdolence/slack-morphism-rust/pull/387
• https://github.com/abdolence/slack-morphism-rust/releases/tag/v2.28.0
• https://github.com/abdolence/slack-morphism-rust/security/advisories/GHSA-26w4-8w32-4x3v

osv · GHSA-26w4-8w32-4x3v

• https://github.com/abdolence/slack-morphism-rust/security/advisories/GHSA-26w4-8w32-4x3v
• https://github.com/abdolence/slack-morphism-rust/pull/387
• https://github.com/abdolence/slack-morphism-rust/commit/ac95d0d4539d0eac548a8db99c51c0c1ae832756
• https://github.com/abdolence/slack-morphism-rust
• https://github.com/abdolence/slack-morphism-rust/releases/tag/v2.28.0

No related operational record is retained in the current change model.