Waline authorization issue vulnerability

Waline versions 1.40.3 and earlier contain a security vulnerability. This vulnerability arises because the POST /api/token endpoint fails to validate the type of the email field before passing it directly to MongoDB for storage. As a result, non-string emails cause the field to be discarded,...