Skip to content

[Codex] [106] Align login lockout for unknown users#19108

Merged
Dakuan merged 5 commits into
masterfrom
codex/vuln-106-lockout-enumeration
Jul 1, 2026
Merged

[Codex] [106] Align login lockout for unknown users#19108
Dakuan merged 5 commits into
masterfrom
codex/vuln-106-lockout-enumeration

Conversation

@Dakuan

@Dakuan Dakuan commented Jun 30, 2026

Copy link
Copy Markdown
Contributor

Description

Tracks failed login attempts and lockout checks by submitted email regardless of whether a user exists, with regression coverage showing unknown emails reach the same lockout response threshold.

@Dakuan
Dakuan marked this pull request as ready for review July 1, 2026 04:35
@readme-ai-writer

readme-ai-writer Bot commented Jul 1, 2026

Copy link
Copy Markdown

📚 No documentation changes were needed for this PR (Job ID: 6a4499102877e35a26cd3b2b).

@melohagan melohagan left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@Dakuan
Dakuan enabled auto-merge July 1, 2026 09:59
@Dakuan
Dakuan merged commit 2b54845 into master Jul 1, 2026
34 checks passed
@Dakuan
Dakuan deleted the codex/vuln-106-lockout-enumeration branch July 1, 2026 10:07
@github-actions github-actions Bot locked and limited conversation to collaborators Jul 1, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants