[MEDIUM] AVideo has SSRF Protection Bypass via HTTP Redirect in Image Download Endpoints

PKSA-37q2-fmsd-htgf CVE-2026-33766 GHSA-f359-r3pv-2phf

Affected package: wwbn/avideo

Affected version: <=14.3

Reported by:
GitHub