Cpe:2.3:a:kan:kan:0.6.0:*:*:*:*:*:*:*

Kan versions 0.5.5 through 0.6.0 contain an unauthenticated SSRF vulnerability in the /api/download/attatchment endpoint that allows attackers to probe internal services and cloud metadata.