Executive brief
Koel has SSRF through Authenticated Subsonic podcast feed URLs
Affected products
- Packagist phanan/koel
Junglewise Threat Intelligence
Severity: low · CVSS 3.1 · Published 2026-07-15
Technologies: phanan/koel (Packagist). Vendors: Packagist.
Koel has SSRF through Authenticated Subsonic podcast feed URLs