{"id":"ECHO-77e5-0c9b-7930","upstream":["CVE-2026-115506"],"severity":[],"modified":"2026-10-23T11:19:22.658Z","affected":[{"package":{"ecosystem":"Echo","name":"expat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-1+e2"}]}]}],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2026-115506"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-115506"},{"type":"WEB","url":"https://github.com/hannob/lololol"},{"type":"WEB","url":"https://github.com/libexpat/libexpat"},{"type":"WEB","url":"https://github.com/libexpat/libexpat/issues/1160"},{"type":"WEB","url":"https://github.com/libexpat/libexpat/pull/1433"},{"type":"WEB","url":"https://www.vulncheck.com/advisories/libexpat-through-2.9.0-denial-of-service-via-billion-laughs-detection-delay"}]}