[MEDIUM] Koel: Authenticated Blind SSRF via Subsonic Podcast Channel Creation

PKSA-drvx-ht86-w4b7 CVE-2026-54492 GHSA-w79m-f3jx-779v

Affected package: phanan/koel

Affected version: <=9.6.0

Reported by:
GitHub