Seven LightRAG advisories in a day, including SSRF through IPv6-transition addresses.

GitHub published seven lightrag-hku advisories on September 22: an SSRF-guard bypass via NAT64, 6to4 and IPv4-compatible addresses in the image downloader, stored XSS in the chat renderer from ingested documents, and a missing rate limit on /login. The same IPv6-transition bypass hit Cloudreve that day. Any agent or RAG fetch allowlist should be checked for those address forms specifically.