New API: SSRF Protection Bypass via Unresolved Hostname in Notification URLs (CVE-2026-33655) | HOL Guard CVE