{"id":"ECHO-9c50-798a-c0af","upstream":["CVE-2018-13420","GHSA-jc8c-gg53-wcm7"],"severity":[],"modified":"2025-08-03T16:59:06.694Z","affected":[{"package":{"ecosystem":"Echo","name":"google-perftools"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]}],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2018-13420"}],"withdrawn":"2025-08-03T16:59:06.694Z","summary":"False positive from LeakSanitizer. Memory is intentionally allocated once during \nlibrary initialization and never freed, following standard patterns for static/global \nvariables. Not a genuine security vulnerability.\nhttps://github.com/gperftools/gperftools/issues/1013\n"}