USN-6722-1: Django vulnerability

Simon Charette discovered that the password reset functionality in
Django used a Unicode case insensitive query to retrieve accounts
associated with an email address. An attacker could possibly use this
to obtain password reset tokens and hijack accounts.

accounts address attacker case django email hijack password password reset query reset tokens unicode usn vulnerability