Cpe:2.3:a:frain-Dev:convoy:*:*:*:*:*:*:*:*

Convoy versions up to and including 26.6.2 contain an Insecure Direct Object Reference (IDOR) vulnerability that allows authenticated users to leak plaintext message broker credentials from other tenants.