Public/pics
2
2 Fork 3
Code Issues 5 Pull Requests 1 Releases Wiki Activity

Fix (security): don't accept empty reset keys for users with no password reset pending #57

Merged
Aaron merged 1 commits from yorick/pics:fix-passwordreset into master 2026-10-24 18:05:45 +02:00
Conversation 0 Commits 1 Files Changed 1
+8 -1
1 Commits
Author SHA1 Message Date
yorick aca44ddd5c Fix (security): don't accept empty reset keys for users with no password reset pending 
Currently, it's possible to reset passwords for users that do not have any password reset by providing an empty key, which would match '' or NULL.
 2026-10-23 13:12:17 +02:00