{"id":"ECHO-b110-6f36-d7d3","upstream":["CVE-2026-23903","GHSA-c244-p6m5-vqj6"],"severity":[],"modified":"2026-09-28T00:01:30.733Z","affected":[{"package":{"ecosystem":"Echo:Maven","name":"org.apache.shiro:shiro-core","purl":"pkg:maven/org.apache.shiro/shiro-core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0"}]}]},{"package":{"ecosystem":"Echo:Maven","name":"org.apache.shiro:shiro-spring","purl":"pkg:maven/org.apache.shiro/shiro-spring"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0"}]}]},{"package":{"ecosystem":"Echo:Maven","name":"shiro-spring","purl":"pkg:maven/shiro-spring"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0"}]}]}],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2026-23903"},{"type":"WEB","url":"https://github.com/advisories/GHSA-c244-p6m5-vqj6"}]}