GHSA-6p96-cfg5-4vhp: Koel: Authenticated Full-Read SSRF via Subsonic Internet Radio Stations

Koel version 9.6.0 contains an authenticated server-side request forgery (SSRF) vulnerability via its Subsonic-compatible internet radio station endpoints. Unlike the regular web API, these Subsonic…