fix: Endpoints /login and /verifyPassword disclose MFA secrets and protected fields when _User get is denied (GHSA-75v4-m273-5j49)#10492
Merged
mtrezza merged 2 commits intoJun 3, 2026
Commits
Commits on Jun 2, 2026
- committed
- committed