API Security (Peach API) scanner doesn't support CWE-918 Server-Side Request Forgery (SSRF). This is a gap between API Security and ZAP.
#223783 (comment 593961506)
