{"id":"ECHO-17b6-9d89-71db","modified":"2026-10-17T00:57:59.009551Z","published":"2026-09-30T11:25:19.427Z","upstream":["CVE-2024-29131","GHSA-xjp4-hw94-mvp5"],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2024-29131"},{"type":"WEB","url":"https://github.com/advisories/GHSA-xjp4-hw94-mvp5"}],"affected":[{"package":{"name":"org.apache.commons:commons-configuration2","ecosystem":"Echo:Maven","purl":"pkg:maven/org.apache.commons/commons-configuration2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.1"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-17b6-9d89-71db.json"}}],"schema_version":"1.9.2"}