GHSA-9qhg-99ww-9mqc: utcp-http SSRF: HTTP tool invocation follows redirects without re-validating the target

A vulnerability in the utcp-http library allows attackers to bypass URL validation through HTTP redirects. When a tool is invoked, the library validates the initial URL but then follows redirects without re-checking where they lead, allowing an attacker to redirect the request to internal services like cloud metadata endpoints (systems that store sensitive configuration data) and steal the response. This is a form of SSRF (server-side request forgery, where an attacker tricks a server into making requests to unintended targets).