Password reset e-mail being sent to non-valid users

Hi @kimcodes

I am referring to the actual password reset e-mail being sent. If I were to enter abc@123.com and that e-mail is not registered, an e-mail is still being sent to abc@123.com allowing them to reset their password.

Non-valid meaning that the e-mail is not registered.

Thanks for the response!