Vendor
Split.io
- First Reported
- Apr 29, 2026
- Latest Reported
- Apr 29, 2026
Reported Context (1)
- ClickUp used Split.io client-side SDK keys and targeted customer emails in flag rules, making the data discoverable by design. ClickUp Says Feature-Flag Misconfiguration Exposed 893 Customer Emails and an API Token
Products (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.
