{"id":"ECHO-8fda-fcf5-f272","modified":"2026-07-23T21:30:06.249308101Z","published":"2026-06-22T09:46:54.415Z","upstream":["CVE-2026-56406"],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2026-56406"}],"affected":[{"package":{"name":"expat","ecosystem":"Echo","purl":"pkg:deb/echo/expat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-1"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-8fda-fcf5-f272.json"}}],"schema_version":"1.9.0"}