CVE-2026-65840 Fider: Cross-Tenant Authentication Bypass via Missing tenant_id Filter in getVerificationByKey

Fider is a feedback portal for feature requests and suggestions. Prior to version 0.36.0, in multi-tenant mode HOSTMODE=multi, an attacker can use an email verification key issued by Tenant A to authenticate as the same email address on Tenant B. This completely bypasses tenant isolation and allo...