Threats affecting pkg:github/arcreel/ArcReel

ArcReel versions 0.32.0, 0.33.0, and 0.34.0 contain a server-side request forgery (SSRF) vulnerability in the Provider Test-Connection Endpoint (/api/v1/providers/{id}/test). This flaw allows remote attackers with low privileges to induce the server to make unauthorized requests. The vulnerability has been publicly disclosed, but no vendor response or patch is currently available.