[Critical Data Breach] Exposure of PII Data Leak via API Response

Summary

A critical information disclosure vulnerability was discovered, exposing sensitive user data via an API response. The leaked data includes full name, email, phone number, account details, user roles, and authentication-related identifiers. This poses a significant privacy risk and can lead to identity theft, phishing attacks, and unauthorized access.