TI-2026-28784 CVE-2026-39912 · GHSA-83h9-46h8-whf4
v2board / Xboard Authentication Token Exposure via loginWithMailLink
Priority HIGH 80
V2Board 1.6.1 through 1.7.4 and Xboard through 0.1.9 expose authentication tokens in HTTP response bodies of the loginWithMailLink endpoint when the login_with_mail_link_enable feature is active.