{"id":"ECHO-e60c-e8f0-b786","modified":"2026-10-22T00:45:09.661889236Z","published":"2026-10-22T00:00:25.004Z","upstream":["CVE-2026-48509","GHSA-2f33-pr97-265q"],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2026-48509"},{"type":"WEB","url":"https://github.com/advisories/GHSA-2f33-pr97-265q"}],"affected":[{"package":{"name":"messagepack","ecosystem":"Echo:NuGet","purl":"pkg:nuget/messagepack"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.301"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-e60c-e8f0-b786.json"}}],"schema_version":"1.9.0"}