[karlerss]

This is considered a critical security vulnerability. [0]

[0] https://owasp.org/www-project-top-ten/2017/A6_2017-Security_...

[bullen]

Not if it's open-source.

Security by obfuscation is generally not a good option if you can avoid it.

[karlerss]

If there are other vulnerabilities present, stack traces can be forced to dump all sorts of data like env variables and network information and maybe someone else's personal information.

I strongly urge everyone to hide their stack traces in production. This will reduce your application's attack surface.

[tester34]

>Security by obfuscation is generally not a good option if you can avoid it.

Of course, but obscurity increases security