{"metadata": {"vulnerability": "cve-2026-15074", "count": 15, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-07-08T15:21:49.362Z", "date_only": false, "value": "2026-07-08T15:21:49.362Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-15074", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-07-23T03:01:47.887Z", "date_only": false, "value": "2026-07-23T03:01:47.887Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-15074", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-07-23T03:01:47.887Z", "date_only": false, "value": "2026-07-23T03:01:47.887Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / openjs", "record": "cve-2026-15074", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-23T03:09:27.209Z", "date_only": false, "value": "2026-07-23T03:09:27.209001Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3mrbueoqlgs2t", "record": "CVE-2026-15074", "field": "creation_timestamp", "uuid": "75d76df5-4a42-4483-a05e-29c196233ecd", "content": "\ud83d\udea8 High-severity security fix in @fastify/static@10.1.1 just released!\n\nPatches CVE-2026-15074: @fastify/static vulnerable to route guard bypass via path traversal.\n\ngithub.com/fastify/fast...", "url": "https://bsky.app/profile/ulisesgascon.com/post/3mrbueoqlgs2t"}, {"timestamp": "2026-07-23T04:16:31Z", "date_only": false, "value": "2026-07-23T04:16:31Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-83W8-P2F5-377R", "record": "GHSA-83W8-P2F5-377R", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-07-23T04:16:31.980Z", "date_only": false, "value": "2026-07-23T04:16:31.980", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-15074", "record": "FKIE_CVE-2026-15074", "field": "published"}, {"timestamp": "2026-07-23T07:59:57.714Z", "date_only": false, "value": "2026-07-23T07:59:57.714851Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrcem6yo6l2a", "record": "CVE-2026-15074", "field": "creation_timestamp", "uuid": "412be0ed-0e42-4c85-83bb-695bfbe3fa71", "content": "\ud83d\udfe0 CVE-2026-15074 - High (7.5)\n\n@fastify/static up to and including version 10.1.0 fails to reject dot-dot path segments in reque...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-15074/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrcem6yo6l2a"}, {"timestamp": "2026-07-23T08:44:54.068Z", "date_only": false, "value": "2026-07-23T08:44:54.068403Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrch4kgxql23", "record": "CVE-2026-15074", "field": "creation_timestamp", "uuid": "57167676-2802-472f-b75a-3256b5ab5d96", "content": "@fastify/static 10.1.0\u4ee5\u524d\u3067\u3001dot-dot\u30bb\u30b0\u30e1\u30f3\u30c8\u306e\u7121\u52b9\u5316\u306b\u5931\u6557\u3002\u653b\u6483\u8005\u306f\u9759\u7684\u30eb\u30fc\u30c8\u5185\u306e\u30d5\u30a1\u30a4\u30eb\u3092\u8aad\u307f\u53d6\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u300210.1.1\u3067\u4fee\u6b63\u3002\nCVE-2026-15074 CVSS 7.5 | HIGH", "url": "https://bsky.app/profile/postac001.bsky.social/post/3mrch4kgxql23"}, {"timestamp": "2026-07-23T14:14:38.857Z", "date_only": false, "value": "2026-07-23T14:14:38.857101Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-15074", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-07-23T14:14:38.857Z", "date_only": false, "value": "2026-07-23T14:14:38.857101Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-15074", "record": "FKIE_CVE-2026-15074", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-07-23T14:14:46.933Z", "date_only": false, "value": "2026-07-23T14:14:46.933Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-15074", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-23T14:14:46.933Z", "date_only": false, "value": "2026-07-23T14:14:46.933Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-15074", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-24T16:43:21Z", "date_only": false, "value": "2026-07-24T16:43:21Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-83W8-P2F5-377R", "record": "GHSA-83W8-P2F5-377R", "field": "published"}, {"timestamp": "2026-07-24T16:43:21Z", "date_only": false, "value": "2026-07-24T16:43:21Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-83W8-P2F5-377R", "record": "GHSA-83W8-P2F5-377R", "field": "modified"}, {"timestamp": "2026-07-28T17:02:14.703Z", "date_only": false, "value": "2026-07-28T17:02:14.703", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-15074", "record": "FKIE_CVE-2026-15074", "field": "lastModified"}]}