The original security report is here: https://www.securityevaluators.com/casestudies/password-manager-hacking/ https://www.securityevaluators.com/casestudies/p

The original security report is here: https://www.securityevaluators.com/casestudies/password-manager-hacking/ https://www.securityevaluators.com/casestudies/password-mana... The flaw in question is, most of them keep the master password in memory longer than necessary without trying to mask or sanitize it.