{"id":"ECHO-7436-73b1-3ab0","upstream":["CVE-2026-47857","GHSA-p9xf-3946-vr35"],"severity":[],"modified":"2026-10-21T16:15:19.606Z","affected":[{"package":{"ecosystem":"Echo:Maven","name":"io.projectreactor:reactor-core","purl":"pkg:maven/io.projectreactor/reactor-core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0+echo.1"}]}]}],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2026-47857"},{"type":"WEB","url":"https://spring.io/security/cve-2026-47857"}]}