{"id":"ECHO-cb2d-96ce-c6cf","modified":"2026-09-28T00:45:06.367677975Z","published":"2026-09-28T00:00:22.372Z","upstream":["CVE-2022-3509","GHSA-g5ww-5jh7-63cx"],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2022-3509"},{"type":"WEB","url":"https://github.com/advisories/GHSA-g5ww-5jh7-63cx"}],"affected":[{"package":{"name":"com.google.protobuf:protobuf-java","ecosystem":"Echo:Maven","purl":"pkg:maven/com.google.protobuf/protobuf-java"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.3"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-cb2d-96ce-c6cf.json"}},{"package":{"name":"protobuf-java","ecosystem":"Echo:Maven","purl":"pkg:maven/protobuf-java"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.3"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-cb2d-96ce-c6cf.json"}}],"schema_version":"1.9.0"}