{"id":"ECHO-fde3-5c2e-f6aa","upstream":["CVE-2026-45205","GHSA-337m-mw94-2v6g"],"severity":[],"modified":"2026-09-28T00:02:02.269Z","affected":[{"package":{"ecosystem":"Echo:Maven","name":"commons-configuration2","purl":"pkg:maven/commons-configuration2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.0"}]}]},{"package":{"ecosystem":"Echo:Maven","name":"org.apache.commons:commons-configuration2","purl":"pkg:maven/org.apache.commons/commons-configuration2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.0"}]}]}],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2026-45205"}]}