Linktree disclosed a bug submitted by jagata: https://hackerone.com/reports/1775162 – Bounty: $600 [Source]