CVE-2026-39087

ntfy before 2.22.0 allows SSRF because of an unanchored regular expression...