{"vulnerability": "GHSA-chgx-jx3p-rf73", "sightings": [{"uuid": "a341dd4e-95fd-4091-aae1-3f73b2a02bfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-chgx-jx3p-rf73", "type": "seen", "source": "https://bsky.app/profile/Whiskeyomega.cupoftea.social.ap.brid.gy/post/3mmceqyeaiq72", "content": "Upgraded COTS to 4.6.0 Alpha 8 that includes 4.5.10 security patches\n\nSecurity\n\nFix SSRF protection bypass (GHSA-crr4-7rm4-8gpw, GHSA-xx55-4rrg-8xg6)\nFix Linked-Data Signature bypass through JSON-LD graph restructuring features (GHSA-53m7-2wrh-q839, GHSA-chgx-jx3p-rf73)\nUpdated dependencies [\u2026]", "creation_timestamp": "2026-05-20T16:56:47.017434Z"}, {"uuid": "b52d79ca-e8f9-446c-bf67-94f61d772f3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-chgx-jx3p-rf73", "type": "seen", "source": "https://bsky.app/profile/tesaguri.fedibird.com.ap.brid.gy/post/3mmgowt2krrm2", "content": "LD-Signature Bypass via JSON-LD Named-Graph Restructuring \u00b7 Advisory \u00b7 mastodon/mastodon \u00b7 GitHub\nhttps://github.com/mastodon/mastodon/security/advisories/GHSA-chgx-jx3p-rf73\n\n\u3068\u3044\u3046\u304b\u3053\u308c\u3001\u201cNamed-Graph\u201d\u3068\u3042\u308b\u3051\u3069\u3001\u672c\u5f53\u306b*named* graph\u3060\u3063\u305f\u3089\u30ab\u30ce\u30cb\u30ab\u30eb\u306aN-Quads\u306b\u3082\u5f71\u97ff\u3059\u308b\u308f\u3051\u3060\u304b\u3089\u3001\u554f\u984c\u306b\u306a\u308b\u306e\u306f\u30c7\u30d5\u30a9\u30eb\u30c8\u30b0\u30e9\u30d5\u306b\u5bfe\u3059\u308b\u660e\u793a\u7684\u306a`@graph`\u306e\u5834\u5408\u3060\u3051\u3067\u306f\u3002\u305d\u3057\u3066\u30c7\u30d5\u30a9\u30eb\u30c8\u30b0\u30e9 [\u2026]", "creation_timestamp": "2026-05-22T10:09:41.867652Z"}]}