{"id":"ECHO-a29e-7cbe-3436","modified":"2026-09-28T00:45:50.180435611Z","published":"2026-09-28T00:02:11.218Z","upstream":["CVE-2026-49844","GHSA-qv9r-c865-cp47"],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2026-49844"}],"affected":[{"package":{"name":"log4j-api","ecosystem":"Echo:Maven","purl":"pkg:maven/log4j-api"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.25.5"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-a29e-7cbe-3436.json"}},{"package":{"name":"org.apache.logging.log4j:log4j-api","ecosystem":"Echo:Maven","purl":"pkg:maven/org.apache.logging.log4j/log4j-api"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.25.5"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-a29e-7cbe-3436.json"}}],"schema_version":"1.9.0"}