{"id":"ECHO-cad4-7176-7840","modified":"2026-09-30T00:45:07.310416982Z","published":"2026-07-31T00:03:41.228Z","upstream":["CVE-2026-16728","GHSA-8xcm-r25x-g524"],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2026-16728"},{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2026-16728"}],"affected":[{"package":{"name":"node-undici","ecosystem":"Echo","purl":"pkg:deb/echo/node-undici"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.0+dfsg1+~cs24.12.11-1+e1"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-cad4-7176-7840.json"}},{"package":{"name":"undici","ecosystem":"Echo:npm","purl":"pkg:npm/undici"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.28.0"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-cad4-7176-7840.json"}}],"schema_version":"1.9.0"}