{"id":"ECHO-0d81-9e7e-e346","modified":"2026-10-24T00:45:21.816525487Z","published":"2026-10-24T00:00:45.871Z","upstream":["CVE-2026-34986","GHSA-78h2-9frx-2jm8"],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2026-34986"}],"affected":[{"package":{"name":"github.com/go-jose/go-jose/v4","ecosystem":"Echo:Go","purl":"pkg:golang/github.com/go-jose/go-jose/v4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.5"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-0d81-9e7e-e346.json"}}],"schema_version":"1.9.0"}