CVE-2026-55598 - PinePods: Authenticated SSRF via podcast RSS enclosure URL (server-side fetch of attacker-controlled URL, no host validation)
CVE ID :CVE-2026-55598 Published : Oct. 30, 2026, 7:31 p.m. | 30 minutes ago Description :PinePods is a complete, self-hosted podcast management system written in Rust. Prior to 0.9.0, an authenticated user can subscribe to an attacker-controlled RSS feed through `POST /api/data/add_podcast`...