{"vulnerability": "cve-2026-75899", "sightings": [{"uuid": "7f77e9d2-dc94-4c6a-aba3-1ef0a4939783", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75899", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mttf54lll72j", "content": "Node.js\u306efast-uri\u3067\u3001URI\u306e\u30db\u30b9\u30c8\u540d\u304c\u4e8c\u91cd\u30c7\u30b3\u30fc\u30c9\u3055\u308c\u3001\u4fe1\u983c\u3067\u304d\u306a\u3044URI\u3092\u51e6\u7406\u3059\u308b\u969b\u306b\u672c\u6765\u3068\u7570\u306a\u308b\u5b9b\u5148\u306b\u30eb\u30fc\u30c6\u30a3\u30f3\u30b0\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002SSRF\u3084\u30db\u30b9\u30c8\u30dd\u30ea\u30b7\u30fc\u30d0\u30a4\u30d1\u30b9\u306b\u7e4b\u304c\u308b\u6050\u308c\u2026\nCVE-2026-75899 CVSS 7.5 | HIGH", "creation_timestamp": "2026-08-24T13:15:03.967282Z"}, {"uuid": "ff4bcfa0-9621-4ce8-99bc-dd4550051b14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75899", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3mtszcefdrc2b", "content": "\ud83d\udea8 High-severity security fix in fast-uri 2.4.5, 3.1.6, and 4.1.3 just released!\n\nPatches CVE-2026-75899. Server-side request forgery via repeated hostname percent-decoding.\n\ngithub.com/fastify/fast...", "creation_timestamp": "2026-08-24T09:43:16.616361Z"}, {"uuid": "f9c8b6fd-239f-4af8-99ad-5e58543330ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75899", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mtt6ezu55n25", "content": "fast-uri, the URL parser inside Fastify and many Node apps, can resolve a safe-looking address to localhost (CVE-2026-75899).\n\nIt slips past URL allowlist checks, and you may ship it as a hidden dependency.\n\nFix: update to 2.4.5, 3.1.6, or 4.1.3.", "creation_timestamp": "2026-08-24T11:14:13.850815Z"}]}