{"id":"ECHO-f0ba-e710-dc08","upstream":["CVE-2026-40542","GHSA-v468-qcjx-r72w"],"severity":[],"modified":"2026-09-28T00:01:44.473Z","affected":[{"package":{"ecosystem":"Echo:Maven","name":"httpclient5","purl":"pkg:maven/httpclient5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.1"}]}]},{"package":{"ecosystem":"Echo:Maven","name":"org.apache.httpcomponents.client5:httpclient5","purl":"pkg:maven/org.apache.httpcomponents.client5/httpclient5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.1"}]}]}],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2026-40542"},{"type":"WEB","url":"https://github.com/advisories/GHSA-v468-qcjx-r72w"}]}