Under reviewauth refresh endpoint issues tokens without verifying the requesterSecureBananaLabs/bug-bounty · issue №2847 · JavaScript · AlgoraSum—StandingopenAssessment74/100Repository257★The inspection✓257★△No sum named✓Open and unassigned at inspection✓Funded through AlgoraView & claim on GitHub →ShareXLinkedInRedditHacker NewsCopy link