Packagist/phanan/koel: medium 6.4

Koel has SSRF through Authenticated Subsonic podcast feed URLs

Action: Upgrade phanan/koel to 9.7.0 or later.

composer require phanan/koel:9.7.0

Affected

Fixed versions

Sources

• osv: GHSA-8q6q-m837-fv64
• https://github.com/koel/koel/security/advisories/GHSA-8q6q-m837-fv64
• https://github.com/koel/koel
• https://github.com/koel/koel/releases/tag/v9.7.0

published 2026-07-15T17:31:12Z · modified 2026-07-15T17:45:19.231505564Z · JSON