Security Release v0.2.6: Email Verification Bypass Vulnerabilities Fixed

Critical security fixes addressing email verification bypass vulnerabilities:

Security Issues Fixed:
- Email verification status manipulation through client-side profile updates
- Base64 token forgery allowing arbitrary email verification
- DOM manipulation bypasses of email verification modal

Backend Security Enhancements:
- Secure verification tokens table with cryptographic token generation
- RLS policies preventing direct email verification status changes
- Server-side validation functions with expiration and ownership checks
- Database triggers blocking unauthorized verification status updates
- IP address logging and audit trails for security monitoring

Frontend Security Protections:
- Multi-layered DOM protection preventing UI manipulation bypasses
- Continuous monitoring and re-application of interaction restrictions
- CSS-based backup protection even if JavaScript is disabled
- Mutation observer to protect dynamically added elements
- Enhanced CSP configuration for Senja widget support

API Security Updates:
- Secure token-based verification replacing insecure Base64 method
- Comprehensive error handling with security-focused user messages
- Token validation with signature verification and expiration checks
- Legacy verification method blocking with security warnings
- Enhanced verification email generation with secure tokens

Files Modified:
- Database: New email_verification_tokens table and security functions
- API: Secure verification endpoints with token validation
- Frontend: DOM protection and verification modal enhancements
- CSP: Updated Content Security Policy configuration
- Blog: Security advisory for CVE-2025-65675 disclosure

This release patches critical authentication bypass vulnerabilities and
implements defense-in-depth security measures across the entire platform.

Security researchers and users should upgrade immediately.

apps/dashboard/src/lib/utils/translations/en.json

@@ -10,6 +10,49 @@
     "snackbar_error": "error while sending code"
   },
 
+  "email_verification": {
+    "errors": {
+      "invalid_token": {
+        "title": "Invalid Verification Link",
+        "message": "This verification link is invalid or malformed. Please check your email for the correct link or request a new verification email."
+      },
+      "token_used": {
+        "title": "Link Already Used",
+        "message": "This verification link has already been used. If you need to verify your email again, please request a new verification link."
+      },
+      "token_expired": {
+        "title": "Verification Link Expired",
+        "message": "This verification link has expired for security reasons. Please request a new verification email to continue."
+      },
+      "email_mismatch": {
+        "title": "Email Address Changed",
+        "message": "Your email address has been changed since this verification link was generated. Please request a new verification link for your current email address."
+      },
+      "legacy_blocked": {
+        "title": "Unsupported Verification Method",
+        "message": "This verification method is no longer supported for security reasons. Please request a new verification email using our secure verification system."
+      },
+      "database": {
+        "title": "System Error",
+        "message": "We're experiencing technical difficulties. Please try again later or contact our support team if the issue persists."
+      },
+      "unknown": {
+        "title": "Verification Failed",
+        "message": "An unexpected error occurred during email verification. Please try again or contact our support team for assistance."
+      }
+    },
+    "security_notice": {
+      "title": "Security Enhancement",
+      "message": "We've upgraded our email verification system for better security. Old verification links are no longer valid to protect your account."
+    },
+    "actions": {
+      "request_new": "Request New Verification Email",
+      "contact_support": "Contact Support",
+      "back_to_dashboard": "Back to Dashboard"
+    },
+    "security_footer": "Your account security is our top priority. All verification attempts are logged for security monitoring."
+  },
+
   "delete_modal": {
     "label": "Delete",
     "content": "Are you sure?",