GHSA-x44h-65qv-cw74: praisonaiagents has an SSRF protection bypass in `spider_tools._host_is_blocked()` via DNS-resolved hostnames (`127.0.0.1.nip.io`)

The praisonaiagents library has a security flaw in its SSRF (server-side request forgery, where an attacker tricks a server into making requests to internal systems) protection. The `_host_is_blocked()` function checks if hostnames are blocked, but it never performs DNS resolution (looking up what IP address a hostname points to). This means attackers can use services like `127.0.0.1.nip.io` (a public DNS service that resolves to the local machine) to bypass the protection and access internal services. The four tools `scrape_page`, `extract_links`, `crawl`, and `extract_text` are exposed as LLM-callable functions, so an AI agent can be tricked into making these malicious requests.