{"id":"ECHO-4c54-3bba-f75d","modified":"2026-09-28T00:57:34.393068311Z","published":"2025-11-24T10:12:35.937523Z","upstream":["CVE-2025-48924","GHSA-j288-q9x7-2f5v"],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2025-48924"}],"affected":[{"package":{"name":"commons-lang","ecosystem":"Echo:Maven","purl":"pkg:maven/commons-lang"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6-10+deb12u1"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-4c54-3bba-f75d.json"}},{"package":{"name":"commons-lang3","ecosystem":"Echo:Maven","purl":"pkg:maven/commons-lang3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6-10+deb12u1"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-4c54-3bba-f75d.json"}},{"package":{"name":"commons-lang:commons-lang","ecosystem":"Echo:Maven","purl":"pkg:maven/commons-lang/commons-lang"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6-10+deb12u1"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-4c54-3bba-f75d.json"}},{"package":{"name":"org.apache.commons:commons-lang3","ecosystem":"Echo:Maven","purl":"pkg:maven/org.apache.commons/commons-lang3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6-10+deb12u1"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-4c54-3bba-f75d.json"}}],"schema_version":"1.9.0"}