{"id":"ECHO-b32c-0992-129e","modified":"2026-10-20T14:15:03.061415114Z","published":"2026-10-20T13:58:06.467Z","upstream":["CVE-2026-40021","GHSA-4f7c-pmjv-c25w"],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2026-40021"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-40021"},{"type":"WEB","url":"https://github.com/apache/logging-log4net/pull/280"},{"type":"WEB","url":"https://lists.apache.org/thread/q8otftjswhk69n3kxslqg7cobr0x4st7"},{"type":"WEB","url":"https://logging.apache.org/cyclonedx/vdr.xml"},{"type":"WEB","url":"https://logging.apache.org/log4net/manual/configuration/layouts.html"},{"type":"WEB","url":"https://logging.apache.org/security.html#CVE-2026-40021"},{"type":"WEB","url":"http://www.openwall.com/lists/oss-security/2026/04/10/11"},{"type":"WEB","url":"https://github.com/advisories/GHSA-4f7c-pmjv-c25w"}],"affected":[{"package":{"name":"log4net","ecosystem":"Echo:NuGet","purl":"pkg:nuget/log4net"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.3+echo.1"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-b32c-0992-129e.json"}}],"schema_version":"1.9.0"}