[HIGH] elFinder: SSRF protection bypass via DNS rebinding in the `fsock_get_contents()` fallback

PKSA-r7xr-47v5-58tx CVE-2026-81889 GHSA-8x3q-jpjh-qh5c

Affected package: studio-42/elfinder

Affected version: <=2.1.69

Reported by:
GitHub