{"id":"ECHO-7f94-d993-4cdc","modified":"2026-08-01T04:00:05.295615120Z","published":"2026-07-20T16:36:18.352Z","upstream":["CVE-2026-38753"],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2026-38753"}],"affected":[{"package":{"name":"busybox","ecosystem":"Echo","purl":"pkg:deb/echo/busybox"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.38.0-3"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-7f94-d993-4cdc.json"}},{"package":{"name":"busybox-1.38","ecosystem":"Echo","purl":"pkg:deb/echo/busybox-1.38"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.38.0+e2"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-7f94-d993-4cdc.json"}}],"schema_version":"1.9.0"}