{"uuid": "c5c9a404-0ec3-418e-8e3f-c7d34931d668", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62857", "type": "seen", "source": "https://bsky.app/profile/hollo.hollo.social.ap.brid.gy/post/3mqwslocjbbu2", "content": "### Hollo security updates: 0.8.9 and 0.9.9\n\nIf you run Hollo, update to a patched release now. CVE-2026-62857 affects Fedify's NodeInfo client, which Hollo uses to identify the software running on remote ActivityPub servers.\n\nA NodeInfo lookup starts by fetching a remote server's `/ [\u2026]", "creation_timestamp": "2026-07-18T17:38:21.836637Z"}