Origin validation bypass in password reset and email verification link generation when APPSMITH_BASE_URL is unset
