CVE-2025-55796

The openml/openml.org web application (version v2.0.20241110 ) is vulnerable to account takeover due to the use of predictable MD5-based tokens for critical workflows, including signup confirmation, password resets, and email changes. The root cause is that these tokens are generated by hashing a...