{"id":"ECHO-4184-20c2-c494","modified":"2026-09-30T11:45:32.011282776Z","published":"2025-11-25T17:50:09.415855Z","upstream":["CVE-2024-7254","GHSA-735f-pc8j-v9w8"],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2024-7254"},{"type":"WEB","url":"https://www.cve.org/CVERecord?id=CVE-2024-7254"}],"affected":[{"package":{"name":"com.google.protobuf:protobuf-java","ecosystem":"Echo:Maven","purl":"pkg:maven/com.google.protobuf/protobuf-java"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.28.2"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-4184-20c2-c494.json"}},{"package":{"name":"protobuf","ecosystem":"Echo","purl":"pkg:deb/echo/protobuf"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.12-11+e1"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-4184-20c2-c494.json"}}],"schema_version":"1.9.0"}