{"id":"ECHO-355f-9f1c-25e5","modified":"2026-10-15T12:15:03.090781448Z","published":"2026-10-15T11:42:10.138Z","upstream":["CVE-2026-76844"],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2026-76844"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76844"},{"type":"WEB","url":"https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490"},{"type":"WEB","url":"https://github.com/madler/zlib"},{"type":"WEB","url":"https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393"},{"type":"WEB","url":"https://github.com/madler/zlib/commit/df84af25dc1942490e1d1c899a07619152a46148"},{"type":"WEB","url":"https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate"}],"affected":[{"package":{"name":"zlib-1.2.11","ecosystem":"Echo","purl":"pkg:deb/echo/zlib-1.2.11"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11+e1"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-355f-9f1c-25e5.json"}},{"package":{"name":"zlib-1.3.1","ecosystem":"Echo","purl":"pkg:deb/echo/zlib-1.3.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1+e1"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-355f-9f1c-25e5.json"}},{"package":{"name":"zlib-1.3.2","ecosystem":"Echo","purl":"pkg:deb/echo/zlib-1.3.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2+e1"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-355f-9f1c-25e5.json"}}],"schema_version":"1.9.0"}