{"vulnerability": "CVE-2026-85124", "sightings": [{"uuid": "f233908a-d95c-48c0-a144-7337512d4a07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85124", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3mumc47nwzc2y", "content": "\ud83d\udea8 High-severity security fix in @fastify/http-proxy@11.6.2 just released!\n\nPatches CVE-2026-85124: prefix escape via backslash dot-segments.\n\ngithub.com/fastify/fast...", "creation_timestamp": "2026-09-03T10:57:27.553788Z"}, {"uuid": "bc8184c5-e35a-4a74-b161-b611e3dcd226", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85124", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fzvdpktszvwen", "content": "CVE-2026-85124 - @fastify/http-proxy vulnerable to prefix escape via backslash dot-segments\nCVE ID : CVE-2026-85124\n \n Published : Sept. 3, 2026, 10:51 a.m. | 26\u00a0minutes ago\n \n Description : @fastify/http-proxy versions before 11.6.2 do not validate proxied HTTP request paths ...", "creation_timestamp": "2026-09-03T11:44:26.440177Z"}]}