Threats affecting pkg:github/databasus

Databasus versions 3.7.0 through 3.61.0 have an authentication bypass vulnerability that permits unauthenticated attackers to brute-force six-digit password reset codes without rate limiting or lockout. This flaw allows attackers to take over user accounts, including administrators, by exploiting the POST /api/v1/users/reset-password endpoint.