Information Disclosure During Authentication

devise-i18n is vulnerable to information disclosure. The devise library uses devise.failure.invalid when a user attempts to log in with a valid user name, but an incorrect password; it uses devise.failure.notfoundindatabase when the user name does not exist. In a default installation of devise th...