Data Leak
Notion’s 4-Year API Flaw Leaks Every Public Page Editor’s Email
Any Notion page published to the web quietly exposes its editors’ names, emails, and profile photos through an unauthenticated API — a flaw first reported in 2022 and still unpatched. The real lesson: collaboration metadata is now a phishing target list.