{"id":"ECHO-0ea6-9825-f478","upstream":["CVE-2026-56850"],"severity":[],"modified":"2026-09-08T10:27:57.100Z","affected":[{"package":{"ecosystem":"Echo","name":"nodejs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]},{"package":{"ecosystem":"Echo","name":"nodejs-16"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.20.2+e1"}]}]},{"package":{"ecosystem":"Echo","name":"nodejs-18"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.20.8+e2"}]}]}],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2026-56850"},{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2026-56850"}]}