TI-2026-58733 CVE-2026-85608 · GHSA-frfv-49qc-79r8
Douyin_TikTok_Download_API 4.1.2 SSRF via url parameter
Priority HIGH 77
Douyin_TikTok_Download_API through 4.1.2 contains a server-side request forgery vulnerability in the /api/download and /api/hybrid/video_data endpoints that allows unauthenticated attackers to fetch arbitrary URLs by sup…