CVE-2026-33323

Summary (CVE-2026-33323): Parse Server exposes an information disclosure vulnerability in the Pages and legacy PublicAPI routes used to resend email verification links. Before versions 8.6.51 and 9.6.0-alpha.40, these endpoints leak whether a given username exists and has an unverified email by r...

The vulnerability of the Git-based software platform for collaborative code development on GitLab arises from the possibility of sending a code-based email with a password reset to unverified email addresses. This allows attackers to gain unauthorized access to any user’s account.

The vulnerability of the Git-based software platform for collaborative code development on GitLab arises from the possibility of sending emails containing code as a password reset message to unverified email addresses. Exploiting this vulnerability could allow an attacker, operating remotely, to...