Under reviewBug: Refresh endpoint mints tokens without validating a refresh tokenSecureBananaLabs/bug-bounty · issue №1750 · JavaScript · AlgoraSum—StandingopenAssessment74/100Repository257★The inspection✓257★△No sum named✓Open and unassigned at inspection✓Funded through AlgoraView & claim on GitHub →ShareXLinkedInRedditHacker NewsCopy link