{"id":"ECHO-d18b-2042-fd80","upstream":["CVE-2026-38754"],"severity":[],"modified":"2026-07-23T00:19:17.944Z","affected":[{"package":{"ecosystem":"Echo","name":"busybox"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]},{"package":{"ecosystem":"Echo","name":"busybox-1.38"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.38.0+e2"}]}]}],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2026-38754"}]}