{"id":"ECHO-9c06-21c4-eee8","upstream":["CVE-2026-9277","GHSA-w7jw-789q-3m8p"],"severity":[],"modified":"2026-09-28T00:01:24.389Z","affected":[{"package":{"ecosystem":"Echo:npm","name":"shell-quote","purl":"pkg:npm/shell-quote"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.4+~1.7.1-1+deb12u1"}]}]}],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2026-9277"},{"type":"WEB","url":"https://github.com/advisories/GHSA-w7jw-789q-3m8p"}]}