{"id":"ECHO-987e-b086-de53","upstream":["CVE-2025-12863"],"severity":[],"modified":"2026-01-12T09:30:03.675Z","affected":[{"package":{"ecosystem":"Echo","name":"libxml2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.7+dfsg+really2.9.14-2.1+deb13u2"}]}]}],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2025-12863"}],"withdrawn":"2026-01-12T09:30:03.675Z","summary":"CVE was rejected and withdrawn. The reported use-after-free in xmlSetTreeDoc() was determined to be invalid."}