wallabag 2 through 2.6.14 allows SSRF because a crafted title or content field is mishandled during PDF export.
使用 GitHub 登录，一分钟内即可运行你的第一次审计。免费版无需信用卡。