PinchTab has a Blind SSRF via browser-side redirect bypass in /download URL validation
Moderate severity
GitHub Reviewed
Published
Mar 17, 2026
in
pinchtab/pinchtab
•
Updated Mar 20, 2026
Give feedback on Dependabot alerts