{"id":"ECHO-9584-7cf3-54ec","modified":"2026-07-22T12:12:18.685Z","published":"2026-05-10T18:29:38.778535Z","upstream":["CVE-2026-41254"],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2026-41254"},{"type":"WEB","url":"https://www.cve.org/CVERecord?id=CVE-2026-41254"}],"affected":[{"package":{"name":"lcms2","ecosystem":"Echo","purl":"pkg:deb/echo/lcms2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16-2+e2"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-9584-7cf3-54ec.json"}}],"schema_version":"1.9.0"}