There are no checks on whether the input is encrypted if a task is created in an encrypted collaboration. Therefore, a user may accidentally create a task with sensitive input data that will then be stored unencrypted in a database.
This is not an issue with the normal workflow, only if e.g. a user with the python client sets encryption to the wrong value.
{ "nvd_published_at": "2024-01-30T16:15:48Z", "cwe_ids": [ "CWE-922" ], "severity": "LOW", "github_reviewed": true, "github_reviewed_at": "2024-01-30T20:56:50Z" }