CVE-2026-105763 - Twenty: Plaintext IMAP/SMTP/CalDAV password disclosure to any workspace member via /metadata GraphQL
CVE ID :CVE-2026-105763 Published : Oct. 6, 2026, 12:16 a.m. | 1 hour, 11 minutes ago Description :Twenty is an open-source CRM (customer relationship management) platform. From 1.20.10 until 2.7.0, the /metadata GraphQL connectedAccounts query returned connectionParameters from...