CVE-2026-116066: Proxy Request Hook Without Dns Pinningcve-2026-116066-proxy-request-hook-without-dns-pinning
The SSRF proxy's request hook returns a connection config without a `dnsLookup` pin, so the proxy performs its own DNS resolution when it opens the outbound socket. The hostname guard evaluated in this hook (e.g. rejecting hosts that resolve to private, loopback or link-local ranges) therefore uses a different DNS answer than the one the connection actually
