{"uuid": "7cc42082-895e-4077-9dec-d0dae921a7a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75931", "type": "seen", "source": "https://bsky.app/profile/thestandup.bsky.social/post/3mukcg4x6cn2r", "content": "fast-uri, CVE-2026-75931: it only canonicalizes a host to ASCII when the input has an explicit scheme, so resolving a scheme-relative //host/ reference against a scheme-bearing base emits the host verbatim. Re-parsing the resolved URI yields a different host than resolve() returned. #dev", "creation_timestamp": "2026-09-02T15:57:39.814690Z"}