Skip to content

AVideo has Blind SSRF in YPTWallet Donation Webhook via Missing isSSRFSafeURL() Check and CURLOPT_FOLLOWLOCATION Redirect Bypass

Moderate severity GitHub Reviewed Published Apr 27, 2026 in WWBN/AVideo • Updated May 13, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts