1. GitHub Issue: Backend Error Handler Leaks `err.message` in Production, Exposing Internal Data
A critical information disclosure vulnerability has been identified in a backend application's global error handler. The middleware in `backend/src/middleware/auth.ts` is configured to always include the raw `err.message` in HTTP 500 responses, regardless of whether the application is running in a production environmen...