{"id":"ECHO-a8a9-016d-71e9","modified":"2026-09-08T10:45:13.984428154Z","published":"2026-09-05T13:03:38.092Z","upstream":["CVE-2026-86140"],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2026-86140"},{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2026-86140"}],"affected":[{"package":{"name":"libxml2","ecosystem":"Echo","purl":"pkg:deb/echo/libxml2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.7+dfsg+really2.9.14-2.1+deb13u3+e1"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-a8a9-016d-71e9.json"}}],"schema_version":"1.9.0"}