{"id":"ECHO-0abb-2ad0-4d59","upstream":["CVE-2026-13506","GHSA-qp49-qgx5-5m26"],"severity":[],"modified":"2026-09-30T11:25:20.758Z","affected":[{"package":{"ecosystem":"Echo:Maven","name":"org.bouncycastle:bc-fips","purl":"pkg:maven/org.bouncycastle/bc-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2.7"}]}]},{"package":{"ecosystem":"Echo:Maven","name":"org.bouncycastle:bcprov-jdk15to18","purl":"pkg:maven/org.bouncycastle/bcprov-jdk15to18"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2.7"}]}]},{"package":{"ecosystem":"Echo:Maven","name":"org.bouncycastle:bcprov-jdk18on","purl":"pkg:maven/org.bouncycastle/bcprov-jdk18on"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2.7"}]}]}],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2026-13506"},{"type":"WEB","url":"https://github.com/advisories/GHSA-qp49-qgx5-5m26"}]}