Koel: Authenticated Blind SSRF via Subsonic Podcast Channel Creation (CVE-2026-54492) | HOL Guard CVE