medium5.3
CVE-2025-35436
CISA Thorium uses '.unwrap()' to handle errors related to account verification email messages.
Impact
CISA Thorium uses '.unwrap()' to handle errors related to account verification email messages. An unauthenticated remote attacker could cause a crash by providing a specially crafted email address or response. Fixed in commit 6a65a27.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisa | Thorium | through 1.1.2 |