The PassWork extension 5.0.9 for Chrome and other browsers allows an attacker to obtain the cleartext master password.
https://passwork.canny.io/changelog/version-5110
https://chrome.google.com/webstore/detail/passwork-self-hosted/ibiipnmmlnehmeonnhbdajcfagcgihkl