{"id":"ECHO-cbaa-8c1b-69db","upstream":["CVE-2026-33117","GHSA-97jf-46m3-8953"],"severity":[],"modified":"2026-10-07T01:33:59.789Z","affected":[{"package":{"ecosystem":"Echo:Maven","name":"azure-security-keyvault-keys","purl":"pkg:maven/azure-security-keyvault-keys"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.6"}]}]},{"package":{"ecosystem":"Echo:Maven","name":"com.azure:azure-security-keyvault-keys","purl":"pkg:maven/com.azure/azure-security-keyvault-keys"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]}],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2026-33117"},{"type":"WEB","url":"https://github.com/advisories/GHSA-97jf-46m3-8953"}],"withdrawn":"2026-10-07T01:33:59.789Z","summary":"Resolved by package bump to 4.10.7 (fixed version: 4.10.6)"}