Threats affecting pkg:github/MikroDash

MikroDash versions before 0.8.79 contain a server-side request forgery (SSRF) vulnerability. This flaw allows any signed-in user, including those with viewer role permissions, to send crafted requests targeting internal network addresses via notification channels. Attackers can configure webhook or mail destinations to internal IP ranges such as loopback, LAN, or link-local addresses and use the POST /api/notify-channels/{id}/test endpoint to probe internal systems.