Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
ECHO-c01a-40ab-ff3f
See a problem?
Import Source
https://advisory.echohq.com/osv/ECHO-c01a-40ab-ff3f.json
JSON Data
https://api.osv.dev/v1/vulns/ECHO-c01a-40ab-ff3f
Upstream
CVE-2026-34180
GHSA-3c8f-qq7h-7qv6
Withdrawn
2026-09-30T11:38:37Z
Published
2026-07-01T13:02:23Z
Modified
2026-09-30T12:15:06Z
Summary
Not applicable: OpenSSL CVE; Echo's cryptography build links the system OpenSSL, so it is fixed by the OS package, not the wheel.
Details
References
https://advisory.echohq.com/cve/CVE-2026-34180
https://github.com/advisories/GHSA-537c-gmf6-5ccf
Affected packages
Echo:PyPI
/
cryptography
Package
Name
cryptography
Purl
pkg:pypi/cryptography
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Database specific
source
"https://advisory.echohq.com/osv/ECHO-c01a-40ab-ff3f.json"
ECHO-c01a-40ab-ff3f - OSV