EUVD-2026-50472

Flyto2 Core: Multiple HTTP-family modules fetch client-controlled URLs without the SSRF guard their siblings apply SSRF to internal/metadata...