{"vulnerability": "GHSA-m8rv-5g2x-5cg5", "sightings": [{"uuid": "2a8d45f6-ded9-4f29-8f6e-64172bd3bcc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-m8rv-5g2x-5cg5", "type": "seen", "source": "https://bsky.app/profile/nodeland.dev/post/3mrsa2mleb52m", "content": "GHSA-m8rv-5g2x-5cg5 (medium): a malicious `type` on a duck-typed blob-like request body could inject CRLF into the `content-type` header on HTTP/1.1.\n\nValues are now coerced and validated before they reach the header. All three lines.\n\ngithub.com/nodejs/undic...", "creation_timestamp": "2026-07-29T15:21:08.376170Z"}]}