{"id":"ECHO-3185-a5dc-6763","modified":"2026-10-21T17:23:49.289722489Z","published":"2026-09-28T00:01:15.221Z","upstream":["CVE-2026-84375","GHSA-2883-xcg3-v3hh"],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2026-84375"}],"affected":[{"package":{"name":"js-yaml","ecosystem":"Echo:npm","purl":"pkg:npm/js-yaml"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.1+echo.1"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-3185-a5dc-6763.json"}}],"schema_version":"1.9.1"}