Notion Websites Expose Editors' Profile Photos and Email Addresses

Notion websites publicly expose profile photos and email addresses of editors to anyone accessing the pages. The issue affects users who publish content on the web using Notion’s platform. No specific technical details, such as API endpoints or vulnerability identifiers (e.g., CVE), were provided in the report. The exposure occurs without requiring authentication or additional steps from the viewer. The impact includes unauthorized access to personal information of Notion editors. No timeline or patch status was mentioned.