Threats affecting pkg:github/trawl

Trawl versions from 1.5.0 up to but not including 1.10.0 contain a server-side request forgery (SSRF) vulnerability. This flaw allows unauthenticated attackers to bypass the outbound URL policy by using IPv4-mapped IPv6 addresses, enabling them to access internal resources such as loopback, private networks, and cloud metadata services. The vulnerability is fixed in version 1.10.0.