koel

v9.7.1 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 1mo Media Servers

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 1 known CVE

Topics

audio laravel music music-player streaming vue

Affected surfaces

rce_ssrf

ReleasePort's take

Moderate signal

editorial:auto 1mo

ReleasePort v9.7.1 fixes remaining SSRF advisories including DNS rebinding, IPv6 transition, and bail scenarios.

Why it matters: Addresses critical SSRF vulnerabilities (severity 90) affecting network request handling; operators should upgrade immediately to mitigate risk.

Summary

AI summary

Fixed remaining SSRF vulnerabilities including DNS rebinding and IPv6 transition issues.

Changes in this release

Type	Severity	Summary	CVE
Security	Critical	Fixes remaining SSRF advisories (DNS rebinding, IPv6 transition, bail) Fixes remaining SSRF advisories (DNS rebinding, IPv6 transition, bail) Source: llm_adapter@2026-06-04 Confidence: high	—

Full changelog

What's Changed

fix: close remaining SSRF advisories (DNS rebinding, IPv6 transition, bail) by @phanan in https://github.com/koel/koel/pull/2549

Full Changelog: https://github.com/koel/koel/compare/v9.7.0...v9.7.1

Security Fixes

Closed remaining SSRF advisories (DNS rebinding, IPv6 transition, bail)

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track koel

Get notified when new releases ship.

About koel

Music streaming solution that works.

All releases →