ECHO-f08c-7e47-8652
See a problem?- Import Source
- https://advisory.echohq.com/osv/ECHO-f08c-7e47-8652.json
- JSON Data
- https://api.osv.dev/v1/vulns/ECHO-f08c-7e47-8652
- Upstream
- Withdrawn
- 2026-07-26T15:08:53Z
- Published
- 2026-07-25T05:35:20Z
- Modified
- 2026-09-15T03:33:52Z
- Summary
- The vulnerable unexpand(1) code path (multibyte -t handling) was introduced upstream in GNU coreutils 9.11. Debian trixie ships coreutils 9.7-3, which predates it, so this CVE cannot be triggered in our build. No Echo patch is required. Re-evaluate if this spec is ever rebased to coreutils >= 9.11.
- Details
- References