Weakness
ntfy before 2.22.0 allows SSRF because of an unanchored regular expression for web push endpoint URLs.
References
Find the bug before an attacker does.
Sign in with GitHub and run your first audit in under a minute. The free plan needs no credit card.