Junglewise Threat Intelligence

slack-go `SecretsVerifier` accepts empty signing secret without precondition

Severity: medium · CVSS 4 · Published 2026-05-14

Vendors: Go.

Executive brief

slack-go `SecretsVerifier` accepts empty signing secret without precondition

Affected products

  • Go github.com/slack-go/slack

Related threats