Jelly

**Name of the Vulnerable Software and Affected Versions** Weblate versions prior to 2.10.1 **Description** The issue concerns the password reset form, which provides different error messages based on whether an email address is associated with an account. This allows remote attackers to enumerate user accounts by sending a series of requests. **Recommendations** For versions prior to 2.10.1, update to version 2.10.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the password reset form to minimize the risk of exploitation.