Basecamp Once-campfire vulnerabilities

• basecamp once-campfire Campfire vulnerable to SSRF via incomplete private-network denylist in the link-unfurl guard CVE-2026-100355 3.1 LowOctober 30, 2026