42CVE-2026-55598madeofpendletonwool PinePods · PinePods: Authenticated SSRF via podcast RSS enclosure URL (server-side fetch of attacker-controlled URL, no host validation)Ignore reportBlock vendor9.10.3%EXP