The CamelHive Standard · v3.25.0

CH-SEC-028v3.25.0

Valores sensibles (tokens de reset, códigos de verificación) emitidos por un endpoint público, nunca en el cuerpo de la respuesta

Pinned as it read in catalog v3.25.0 — the current version of this rule may read differently, see CH-SEC-028.

Area
SEC
Severity
critical
Detection
llm
Corpus coverage
not measured by the corpus