[HIGH] Koel: Authenticated Full-Read SSRF via Subsonic Internet Radio Stations

PKSA-gv41-hnht-9yhw CVE-2026-54493 GHSA-6p96-cfg5-4vhp

Affected package: phanan/koel

Affected version: <=9.6.0

Reported by:
GitHub