Netlify vulnerable to XSS, SSRF attacks via cache poisoning

The security flaw, tracked as CVE-2022-39239, allowed an attacker to bypass the source image domain allowlist by sending specially crafted headers, causing the handler to load and return arbitrary images.