Junglewise Threat Intelligence

Koel has SSRF through Authenticated Subsonic podcast feed URLs

Severity: low · CVSS 3.1 · Published 2026-07-15

Technologies: phanan/koel (Packagist). Vendors: Packagist.

Executive brief

Koel has SSRF through Authenticated Subsonic podcast feed URLs

Affected products

  • Packagist phanan/koel

Related threats