Threats affecting pkg:golang/omnom

Omnom versions up to 0.9.0 contain a server-side request forgery (SSRF) vulnerability. Authenticated users can submit feed URLs to the /add_feed endpoint, causing the server to make requests to arbitrary hosts without proper validation. This allows attackers to probe internal hosts and ports by leveraging reflected error messages from internal fetch operations.