{"id":"ECHO-e23a-0bbf-4093","modified":"2026-11-12T08:00:07.582Z","published":"2026-11-11T10:29:00.170Z","upstream":["CVE-2026-109903"],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2026-109903"},{"type":"WEB","url":"https://www.cve.org/CVERecord?id=CVE-2026-109903"}],"affected":[{"package":{"name":"xorg-server","ecosystem":"Echo","purl":"pkg:deb/echo/xorg-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:21.1.16-1.3+deb13u4+e3"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-e23a-0bbf-4093.json"}}],"schema_version":"1.9.2"}