[HIGH] Koel: Incomplete fix for CVE-2026-47260 — systemic SSRF in podcast & radio fetch paths

PKSA-1qtf-pcfh-kb47 CVE-2026-54491 GHSA-6qvr-wjmv-v8mm

Affected package: phanan/koel

Affected version: <=9.7.0

Reported by:
GitHub