MindsDB: unauthenticated SSRF via the web crawler (default-open allowlist, no private-IP filter)

### Short description of current behavior

reported via email on 13 June 2026 - no response.
may I share details here please?

### Video or screenshots

_No response_

### Expected behavior

_No response_

### How to reproduce the error

_No response_

### Anything else?

_No response_