[GHSA] GHSA-5846-7qm3-r52j (high) — dssrf: any users using 1.1.1.1 DNS is impacted by SSRF

GHSA-5846-7qm3-r52j Severity: high CVE: CVE-2026-54729

dssrf: any users using 1.1.1.1 DNS is impacted by SSRF

## Summary

is_url_safe can treat localhost as safe when DNS resolver 1.1.1.1 returns NXDOMAIN because dns.resolve4 yields no address and no dns.lookup fallback occurs, allowing server-side request forgery.

## POC

Example to simulate 1.1.1.1 in version before 1.5.0 of dssrf:

```js imp