{"vulnerability": "cve-2026-16158", "sightings": [{"uuid": "736a045a-189c-4b8b-97bf-c2f728bf6821", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16158", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3mqwbred7kk25", "content": "\ud83d\udea8 High-severity security fix in @fastify/reply-from@12.6.4 just released!\n\nPatches CVE-2026-16158, cross-upstream request routing via URL cache key collision.\n\ngithub.com/fastify/fast...", "creation_timestamp": "2026-07-18T12:37:14.253136Z"}, {"uuid": "ea7b1f40-f61e-4ba5-bf93-a06f826694ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16158", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqwgge5io22m", "content": "\ud83d\udfe0 CVE-2026-16158 - High (8.7)\n\nImpact: @fastify/reply-from versions from 8.3.1 up to but not including 12.6.4 build the internal...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-16158/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-18T14:00:32.412770Z"}, {"uuid": "f89a0af4-d5fc-4d67-8402-ecd809521be6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16158", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116944256663979278", "content": "It is possible to see elevated activities targeting fastify reply-from (CVE-2026-16158) https://vuldb.com/vuln/380052/cti", "creation_timestamp": "2026-07-19T02:22:24.999493Z"}]}