{"id":"ECHO-f978-7a1e-3dd3","modified":"2026-07-22T12:12:18.685Z","published":"2026-05-10T18:29:39.044760Z","upstream":["CVE-2026-42798"],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2026-42798"},{"type":"WEB","url":"https://www.cve.org/CVERecord?id=CVE-2026-42798"}],"affected":[{"package":{"name":"lcms2","ecosystem":"Echo","purl":"pkg:deb/echo/lcms2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16-2+e2"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-f978-7a1e-3dd3.json"}}],"schema_version":"1.9.0"}