AIKIDO-2026-10694

TL;DR

validate_restricted_url resolves a hostname once while downstream HTTP clients reconnect using the original hostname, so attacker-controlled DNS can answer validation with a routable address and the live connection with a private or metadata address when private URLs are forbidden. Webhook and custom webhook notification clients now use transports that re-resolve and pin validated addresses per TCP connect while keeping TLS SNI aligned with the original host. Other fixes stop load_script_as_module from leaving stray entries in sys.modules, prevent check_server_version from overwriting caller Authorization headers when an API key is present, and ensure _UnpicklingFuture completion callbacks surface deserialization errors instead of swallowing them.