{"id":"ECHO-b110-6f36-d7d3","modified":"2026-09-28T00:45:23.609151981Z","published":"2026-09-28T00:01:30.733Z","upstream":["CVE-2026-23903","GHSA-c244-p6m5-vqj6"],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2026-23903"},{"type":"WEB","url":"https://github.com/advisories/GHSA-c244-p6m5-vqj6"}],"affected":[{"package":{"name":"org.apache.shiro:shiro-core","ecosystem":"Echo:Maven","purl":"pkg:maven/org.apache.shiro/shiro-core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-b110-6f36-d7d3.json"}},{"package":{"name":"org.apache.shiro:shiro-spring","ecosystem":"Echo:Maven","purl":"pkg:maven/org.apache.shiro/shiro-spring"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-b110-6f36-d7d3.json"}},{"package":{"name":"shiro-spring","ecosystem":"Echo:Maven","purl":"pkg:maven/shiro-spring"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-b110-6f36-d7d3.json"}}],"schema_version":"1.9.0"}