{"id":"ECHO-315f-89e1-2302","upstream":["CVE-2026-64607","GHSA-hjcp-jmpx-g3qm"],"severity":[],"modified":"2026-09-28T00:01:44.473Z","affected":[{"package":{"ecosystem":"Echo:Maven","name":"httpclient5","purl":"pkg:maven/httpclient5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.3"}]}]},{"package":{"ecosystem":"Echo:Maven","name":"org.apache.httpcomponents.client5:httpclient5","purl":"pkg:maven/org.apache.httpcomponents.client5/httpclient5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.3"}]}]}],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2026-64607"}]}