GHSA-v42f-v8xc-j435: Budibase: SSRF via DNS rebinding in the REST datasource integration

Budibase's REST datasource integration has a DNS rebinding vulnerability (TOCTOU, or time-of-check-time-of-use flaw) that defeats IP pinning protection. The system validates a hostname and locks the connection to a safe IP using a Node agent, but the REST path uses undici's fetch instead, which ignores the pinned agent and re-resolves DNS at connection time, allowing an attacker to point the initial validation to a public IP and then rebind to an internal IP to access cloud metadata, databases, or internal services.