Linktree disclosed a bug submitted by sudi: https://hackerone.com/reports/1698652 – Bounty: $600 [Source]