koel vulnerabilities
6 published CVEs name koel among the affected products.
- 6Published CVEs6 of them scored
- 6Last 12 monthspublished in the last year
- 0Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-54491
Koel: Incomplete fix for CVE-2026-47260 — systemic SSRF in podcast & radio fetch paths
koel · koel
High7.1 - CVE-2026-54493
Koel: Authenticated Full-Read SSRF via Subsonic Internet Radio Stations
koel · koel
High7.7 - CVE-2026-54494
Koel: Full-read SSRF via podcast enclosure URL: isPublicHost() filter_var guard does not reject NAT64 (64:ff9b::/96) or 6to4 (2002::/16) IPv6-transition wrappers of internal IPv4
koel · koel
Medium5.3 - CVE-2026-54492
Koel: Authenticated Blind SSRF via Subsonic Podcast Channel Creation
koel · koel
Medium4.3 - CVE-2026-50552
Koel: Server-Side Request Forgery (SSRF) in radio station creation due to missing validation bail
koel · koel
Medium6.3 - CVE-2026-47260
Koel Vulnerable to SSRF via Podcast Episode Enclosure URLs
koel · koel
High7.7