Password Reset Poisoning via Host Header Injection https://github.com/kanboard/kanboard/security/advisories/GHSA-2ch5-gqjm-8p92 Changelogs: https://github.com/kanboard/kanboard/releases/tag/v1.2.45 https://github.com/kanboard/kanboard/releases/tag/v1.2.46 PR: 287775 Security: GHSA-2ch5-gqjm-8p92 MFH: 2025Q2