📦 Serene

This vulnerability allows password reset tokens in Serenity/StartSharp to be reused after initial password reset, remaining valid for 3 hours. Attackers with access to browser history or token exposur...