{"id":"ECHO-7436-73b1-3ab0","modified":"2026-10-21T16:45:03.005137946Z","published":"2026-10-21T16:15:19.606Z","upstream":["CVE-2026-47857","GHSA-p9xf-3946-vr35"],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2026-47857"},{"type":"WEB","url":"https://spring.io/security/cve-2026-47857"}],"affected":[{"package":{"name":"io.projectreactor:reactor-core","ecosystem":"Echo:Maven","purl":"pkg:maven/io.projectreactor/reactor-core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0+echo.1"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-7436-73b1-3ab0.json"}}],"schema_version":"1.9.0"}