Critical flaw in open-source 'pig' admin platform lets anyone bypass password checks

A newly disclosed bug means the /register/password endpoint never actually checks your current password - here's who that really affects.