https://vulnerability.circl.lu/sightings/feed 2026-07-23T21:00:21.417751+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/57167676-2802-472f-b75a-3256b5ab5d96/export 2026-07-23T21:00:21.438017+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "57167676-2802-472f-b75a-3256b5ab5d96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15074", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrch4kgxql23", "content": "@fastify/static 10.1.0\u4ee5\u524d\u3067\u3001dot-dot\u30bb\u30b0\u30e1\u30f3\u30c8\u306e\u7121\u52b9\u5316\u306b\u5931\u6557\u3002\u653b\u6483\u8005\u306f\u9759\u7684\u30eb\u30fc\u30c8\u5185\u306e\u30d5\u30a1\u30a4\u30eb\u3092\u8aad\u307f\u53d6\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u300210.1.1\u3067\u4fee\u6b63\u3002\nCVE-2026-15074 CVSS 7.5 | HIGH", "creation_timestamp": "2026-07-23T08:44:54.068403Z"} 2026-07-23T08:44:54.068403+00:00 https://vulnerability.circl.lu/sighting/412be0ed-0e42-4c85-83bb-695bfbe3fa71/export 2026-07-23T21:00:21.440238+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "412be0ed-0e42-4c85-83bb-695bfbe3fa71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15074", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrcem6yo6l2a", "content": "\ud83d\udfe0 CVE-2026-15074 - High (7.5)\n\n@fastify/static up to and including version 10.1.0 fails to reject dot-dot path segments in reque...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-15074/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-23T07:59:57.714851Z"} 2026-07-23T07:59:57.714851+00:00 https://vulnerability.circl.lu/sighting/75d76df5-4a42-4483-a05e-29c196233ecd/export 2026-07-23T21:00:21.440459+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "75d76df5-4a42-4483-a05e-29c196233ecd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15074", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3mrbueoqlgs2t", "content": "\ud83d\udea8 High-severity security fix in @fastify/static@10.1.1 just released!\n\nPatches CVE-2026-15074: @fastify/static vulnerable to route guard bypass via path traversal.\n\ngithub.com/fastify/fast...", "creation_timestamp": "2026-07-23T03:09:27.209001Z"} 2026-07-23T03:09:27.209001+00:00