Executive brief
Lemmy resend-verification endpoint exposes registered email addresses to unauthenticated users
Affected products
- crates.io lemmy_api
Junglewise Threat Intelligence
Severity: medium · CVSS 4 · Published 2026-05-06
Technologies: lemmy_api (crates.io). Vendors: crates.io.
Lemmy resend-verification endpoint exposes registered email addresses to unauthenticated users