A ClickUp vulnerability has exposed customer email addresses through a basic but critical security flaw. A researcher discovered that a hardcoded API key in a public JavaScript file allowed access to sensitive data without authentication. The issue highlights how simple misconfigurations can create serious risks in widely used SaaS platforms. Hardcoded API key enabled data…