A vulnerability can reportedly connect real email addresses to anonymous ones.