A hardcoded API key embedded in ClickUp’s public website exposed 959 corporate and government email addresses and more than 3 ...