Junglewise Threat Intelligence

Lemmy resend-verification endpoint exposes registered email addresses to unauthenticated users

Severity: medium · CVSS 4 · Published 2026-05-06

Technologies: lemmy_api (crates.io). Vendors: crates.io.

Executive brief

Lemmy resend-verification endpoint exposes registered email addresses to unauthenticated users

Affected products

  • crates.io lemmy_api

Related threats