Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
ECHO-310a-f3e1-8768
See a problem?
Import Source
https://advisory.echohq.com/osv/ECHO-310a-f3e1-8768.json
JSON Data
https://api.osv.dev/v1/vulns/ECHO-310a-f3e1-8768
Upstream
CVE-2026-48514
GHSA-w567-gjr2-hm5j
Withdrawn
2026-11-12T08:00:07Z
Published
2026-06-25T21:25:21Z
Modified
2026-11-12T08:20:25Z
Summary
Unity unsafe blit unbounded length (CWE-789). Upstream e01f07cf only touches Unity-package formatter code that MessagePack.csproj excludes from compilation. Patch retained in patches/ but not applied.
Details
References
https://advisory.echohq.com/cve/CVE-2026-48514
https://github.com/advisories/GHSA-w567-gjr2-hm5j
Affected packages
Echo:NuGet
/
MessagePack
Package
Name
MessagePack
Purl
pkg:nuget/MessagePack
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
2.5.172+echo.1
Database specific
source
"https://advisory.echohq.com/osv/ECHO-310a-f3e1-8768.json"
ECHO-310a-f3e1-8768 - OSV