{"id":"ECHO-985f-7fd1-0025","upstream":["CVE-2026-49268","GHSA-x96m-rh44-vgv8"],"severity":[],"modified":"2026-09-30T11:25:20.758Z","affected":[{"package":{"ecosystem":"Echo:Maven","name":"org.apache.shiro:shiro-core","purl":"pkg:maven/org.apache.shiro/shiro-core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.1"}]}]}],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2026-49268"}]}