Slab Safeurl vulnerabilities

• doyensec safeurl SSRF protection bypass in safeurl via IPv6 addresses and unresolvable hosts CVE-2026-77866 9.0 CriticalSeptember 15, 2026
• doyensec safeurl safeurl validated address is not bound to the request, allowing DNS rebinding CVE-2026-77972 9.0 CriticalSeptember 15, 2026