[MEDIUM] code16/sharp: Server-side request forgery through an unanchored autocomplete endpoint check

PKSA-mbr7-229z-zc1f CVE-2026-84987 GHSA-g6f8-c3x9-jv7f

Affected package: code16/sharp

Affected version: >=10.0.0-beta.1,<10.0.0-beta.4|<9.23.0

Reported by:
GitHub