Magic Link Auth Flaw Enables DoS

A high-severity vulnerability (CVE-2025-10470) in the Magic Link authentication flow allows attackers to repeatedly send invalid login requests, causing uncontrolled memory growth and crashing the service. Deployments relying on Magic Link authentication are at risk of denial-of-service outages. Administrators should apply available patches, monitor for abnormal authentication traffic, and enforce rate limiting at the network or proxy layer until a fix is in place.