SourceHut Registration Bypass When Disabled (CVE-2026-121728)
A logic bug introduced in 2021 allows registration even when disabled in SourceHut versions 0.56.11-0.88.9 if SMTP is configured.
Stories per day · 30 days
1 stories, newest first · one card per story