CVE-2026-108741 Shepherd through 0.3.1 SSRF via DNS Rebinding in Citation Checker

Shepherd shepherd-ai through 0.3.1 contains a server-side request forgery guard bypass in the citation-checker extra because the publicurl guard validates a resolved address but fetch re-resolves the hostname at connect time. Attackers who plant a crafted reference URL in a checked document and...