TI-2026-58788 CVE-2026-85676 · GHSA-vpv7-5wp2-c8xxDub Open Redirect via Unrestricted redir_url ParameterPriority LOW 24Dub contains an open redirect vulnerability in the redir_url query parameter that is accepted on every short link without validation or domain allowlist enforcement.CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00422 · Published 2026-09-04 · No fix listed CWE-601