Instacart Patches Security Bug That Would Have Let Attackers Spoof SMS Messages

A weakness in Instacart's "request_invite" endpoint allowed hackers to capture the user's request link information, along with associated security headers and authentication information.