{"id":"ECHO-d58c-d10e-42b1","upstream":["CVE-2026-23901","GHSA-c4qc-4q9p-m9q9"],"severity":[],"modified":"2026-09-28T00:01:30.078Z","affected":[{"package":{"ecosystem":"Echo:Maven","name":"org.apache.shiro:shiro-core","purl":"pkg:maven/org.apache.shiro/shiro-core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0"}]}]},{"package":{"ecosystem":"Echo:Maven","name":"shiro-core","purl":"pkg:maven/shiro-core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0"}]}]}],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2026-23901"},{"type":"WEB","url":"https://github.com/advisories/GHSA-c4qc-4q9p-m9q9"}]}