CVE-2026-93340: Gladys Assistant password-reset link poisoning

Gladys Assistant versions before 5.1.0 contain a password-reset link poisoning vulnerability. Unauthenticated remote attackers can obtain valid reset tokens for any account, including administrator accounts.