AIKIDO-2026-755806

TL;DR

IMPORT DATABASE checks a caller supplied URL in ImportSecurityValidator, then opens a new connection to the original URL string. The connection follows redirects and resolves the name again, so a redirect or a later DNS answer can reach an internal host the check already rejected, an incomplete fix for CVE-2026-54077. The fix sends the fetch through SafeHttpFetcher, which repeats the scheme and address check on every redirect hop.