{"id":"ECHO-e60c-e8f0-b786","upstream":["CVE-2026-48509","GHSA-2f33-pr97-265q"],"severity":[],"modified":"2026-10-22T00:00:25.004Z","affected":[{"package":{"ecosystem":"Echo:NuGet","name":"messagepack","purl":"pkg:nuget/messagepack"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.301"}]}]}],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2026-48509"},{"type":"WEB","url":"https://github.com/advisories/GHSA-2f33-pr97-265q"}]}