https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-04T14:09:42.913074+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-105127 fkie_cve-2026-105127 2026-10-04T14:09:43.116968+00:00

LaraDashboard 1.4.2 before 1.4.8 applies advanced email validation to unauthenticated forgot-password and reset-password requests, triggering DNS lookups and paid AbstractAPI verification calls. Unauthenticated attackers can submit arbitrary addresses to exhaust the verification quota, making validation fail open for all public forms, and probe domain resolution.

 https://vulnerability.circl.lu/vuln/ghsa-g2mx-6phx-6vgr GHSA-g2mx-6phx-6vgr 2026-10-04T14:09:43.117125+00:00

LaraDashboard 1.4.2 before 1.4.8 applies advanced email validation to unauthenticated forgot-password and reset-password requests, triggering DNS lookups and paid AbstractAPI verification calls. Unauthenticated attackers can submit arbitrary addresses to exhaust the verification quota, making validation fail open for all public forms, and probe domain resolution.