CVE-2026-35407: Django Email Enumerationcve-2026-35407-django-email-enumeration
Raising a validation error when an account already exists can lead to user enumeration attacks. An attacker can probe endpoints to discover registered accounts. Avoid returning distinct errors for existing accounts; instead, process the request opaquely and handle notifications out-of-band. (Note: Token-authenticated confirmation endpoints are excluded as th
