{"id":"ECHO-88ee-645b-e5d6","upstream":["CVE-2026-93452","GHSA-pm27-vjq7-f5fv"],"severity":[],"modified":"2026-10-22T07:45:58.046Z","affected":[{"package":{"ecosystem":"Echo:Maven","name":"org.xerial.snappy:snappy-java","purl":"pkg:maven/org.xerial.snappy/snappy-java"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.10.8+echo.1"}]}]}],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2026-93452"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93452"},{"type":"WEB","url":"https://github.com/xerial/snappy-java/issues/732"},{"type":"WEB","url":"https://github.com/xerial/snappy-java"},{"type":"WEB","url":"https://github.com/xerial/snappy-java/blob/v1.1.10.8/src/main/java/org/xerial/snappy/Snappy.java#L137"},{"type":"WEB","url":"https://www.vulncheck.com/advisories/snappy-java-through-1.1.10.8-buffer-overflow-in-snappy-compress"},{"type":"WEB","url":"https://github.com/advisories/GHSA-pm27-vjq7-f5fv"}]}