PinchTab has Unauthenticated Blind SSRF in Task Scheduler via Unvalidated callbackUrl
Moderate severity
GitHub Reviewed
Published
Mar 22, 2026
in
pinchtab/pinchtab
•
Updated Apr 27, 2026
Give feedback on Dependabot alerts