The login function of Mealie v1.0.0beta-2 allows malicious users to enumerate existing usernames by timing the server's response time.
mealie mealie 1.0.0