{"uuid": "b7dbaaa4-7e34-4fa9-aba3-7a5a301b3c2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-7q9c-hpx7-9cwm", "type": "seen", "source": "https://bsky.app/profile/thestandup.bsky.social/post/3muqddgpemf2z", "content": "GHSA-7q9c-hpx7-9cwm: @typespec/spector registers POST /.admin/stop with no authentication, token, Origin check or IP restriction, and the mock server binds 0.0.0.0 by default. One request from any host that can reach the port ends the process. #dev", "creation_timestamp": "2026-09-05T01:30:02.424366Z"}