{"id":"ECHO-b8d2-238f-d46b","modified":"2026-09-03T11:30:02.983810270Z","published":"2026-08-04T07:46:36.583Z","upstream":["CVE-2026-18477"],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2026-18477"},{"type":"WEB","url":"https://www.cve.org/CVERecord?id=CVE-2026-18477"}],"affected":[{"package":{"name":"tar","ecosystem":"Echo","purl":"pkg:deb/echo/tar"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35+dfsg-3.1+e5"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-b8d2-238f-d46b.json"}}],"schema_version":"1.9.0"}