From 8c00adc6b865653bd717a946dd646eb54ac78c9c Mon Sep 17 00:00:00 2001
From: Lauri Ojansivu <x@xet7.org>
Date: Thu, 19 Feb 2026 23:31:01 +0200
Subject: [PATCH] Fix GHSL-2026-036_Wekan.

Thanks to GHSL and xet7 !
---
 server/publications/boards.js | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/server/publications/boards.js b/server/publications/boards.js
index 0eaa42db0..f261edfd8 100644
--- a/server/publications/boards.js
+++ b/server/publications/boards.js
@@ -225,7 +225,11 @@ publishComposite('board', async function(boardId, isArchived) {
       // Integrations
       {
         async find(board) {
-          return await ReactiveCache.getIntegrations({ boardId: board._id }, {}, true);
+          return await ReactiveCache.getIntegrations(
+            { boardId: board._id },
+            { fields: { token: 0 } },
+            true,
+          );
         }
       },
       // CardCommentReactions at board level