{"id":"ECHO-0abb-2ad0-4d59","modified":"2026-09-30T11:45:10.565904817Z","published":"2026-09-28T00:00:57.025Z","upstream":["CVE-2026-13506","GHSA-qp49-qgx5-5m26"],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2026-13506"},{"type":"WEB","url":"https://github.com/advisories/GHSA-qp49-qgx5-5m26"}],"affected":[{"package":{"name":"org.bouncycastle:bc-fips","ecosystem":"Echo:Maven","purl":"pkg:maven/org.bouncycastle/bc-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2.7"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-0abb-2ad0-4d59.json"}},{"package":{"name":"org.bouncycastle:bcprov-jdk15to18","ecosystem":"Echo:Maven","purl":"pkg:maven/org.bouncycastle/bcprov-jdk15to18"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2.7"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-0abb-2ad0-4d59.json"}},{"package":{"name":"org.bouncycastle:bcprov-jdk18on","ecosystem":"Echo:Maven","purl":"pkg:maven/org.bouncycastle/bcprov-jdk18on"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2.7"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-0abb-2ad0-4d59.json"}}],"schema_version":"1.9.0"}