{"id":"ECHO-3a6d-2aae-ba82","modified":"2026-09-10T00:00:51.005Z","published":"2026-09-09T16:47:11.173Z","upstream":["CVE-2026-87766"],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2026-87766"},{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2026-87766"}],"affected":[{"package":{"name":"bubblewrap","ecosystem":"Echo","purl":"pkg:deb/echo/bubblewrap"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.0-1~deb13u1"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-3a6d-2aae-ba82.json"}}],"schema_version":"1.9.0"}