{"uuid": "55c3ddfd-6c14-4649-9465-bc4838de5a19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-12999", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/hafbptppfxukv", "content": "CVE-2025-12999 - Open VSX Cache Poisoning via Header Injection\nCVE ID : CVE-2025-12999\n \n Published : Sept. 21, 2026, 9:17 a.m. | 17\u00a0minutes ago\n \n Description : UrlUtil.getBaseUrl builds the absolute URLs in a response \u2014 download links, icons, asset and API URLs \u2014 from the X-...", "creation_timestamp": "2026-09-21T09:57:40.766750Z"}