{"id":"ECHO-02f8-df1a-3b35","summary":"Disputed by upstream.\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-45582\nhttps://lists.gnu.org/archive/html/bug-tar/2025-08/threads.html\nhttps://lists.gnu.org/archive/html/bug-tar/2025-08/msg00012.html\n","modified":"2026-09-15T03:33:42.735249498Z","published":"2026-01-29T00:52:32.449393Z","withdrawn":"2025-08-14T13:10:20.436Z","upstream":["CVE-2025-45582"],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2025-45582"}],"affected":[{"package":{"name":"tar","ecosystem":"Echo","purl":"pkg:deb/echo/tar"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.34+dfsg-1.2+deb12u1"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-02f8-df1a-3b35.json"}}],"schema_version":"1.9.0"}