Pixeldrain API key shared with unverified thirdparty sites
When processing Pixeldrain URLs, cyberdrop-dl-patched could send an Authorization header that includes the user's API key to unverified hosts.
Advisories for Pypi/Cyberdrop-Dl-Patched package
2026