AIKIDO-2026-10235

TL;DR

Affected versions of this package do not properly support the #[Sensitive] attribute to mark and redact confidential payload properties, causing sensitive values (e.g., keys, tokens, or secrets) to be exposed in logs, JSON serialization, debug output, and event payloads; an attacker with access to application logs, monitoring systems, or serialized task data could exploit this by harvesting leaked secrets to gain unauthorized access, escalate privileges, or perform lateral movement within the environment.