The CamelHive Standard

CH-SEC-028

Valores sensibles (tokens de reset, códigos de verificación) emitidos por un endpoint público, nunca en el cuerpo de la respuesta

Currently v3.25.0. To cite a stable, pinned form of this page, use /standard/versions/3.25.0/CH-SEC-028.

Area
SEC
Severity
critical
Detection
llm
Corpus coverage
not measured by the corpus

Corpus coverage measured as of 9/2/2026 (commit 2c57d95600).