{"id":"ECHO-77e5-0c9b-7930","modified":"2026-10-23T11:45:02.997496487Z","published":"2026-10-23T11:19:22.658Z","upstream":["CVE-2026-115506"],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2026-115506"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-115506"},{"type":"WEB","url":"https://github.com/hannob/lololol"},{"type":"WEB","url":"https://github.com/libexpat/libexpat"},{"type":"WEB","url":"https://github.com/libexpat/libexpat/issues/1160"},{"type":"WEB","url":"https://github.com/libexpat/libexpat/pull/1433"},{"type":"WEB","url":"https://www.vulncheck.com/advisories/libexpat-through-2.9.0-denial-of-service-via-billion-laughs-detection-delay"}],"affected":[{"package":{"name":"expat","ecosystem":"Echo","purl":"pkg:deb/echo/expat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-1+e2"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-77e5-0c9b-7930.json"}}],"schema_version":"1.9.0"}