Skip to content

PinchTab has Unauthenticated Blind SSRF in Task Scheduler via Unvalidated callbackUrl

Moderate severity GitHub Reviewed Published Mar 22, 2026 in pinchtab/pinchtab • Updated Apr 27, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts