crates.io/lemmy_api: medium
Lemmy resend-verification endpoint exposes registered email addresses to unauthenticated users
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.19.1-rc.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-qxrw-f6fh-34r7
- https://github.com/LemmyNet/lemmy/security/advisories/GHSA-qxrw-f6fh-34r7
- https://github.com/LemmyNet/lemmy/commit/4afff1699d08920b9a9023e81b229d772b894d91
- https://github.com/LemmyNet/lemmy
published · modified · JSON