Username enumeration attack in goauthentik

Summary Using a recovery flow with an identification stage an attacker is able to determine if a username exists. Impact Only setups configured with a recovery flow are impacted by this. Anyone with a user account on a system with the recovery flow described above is susceptible to having their...