Security
فارسی
All products

org.apache.shiro:shiro-core

Maven · Package
13 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Apache Shiro's "remember me" cookie age is not verified on the server.CVE-2026-56130 · GHSA-M8G6-VRR2-X7FF org.apache.shiro:shiro-coreorg.apache.shiro:shiro-web MavenRed Hat Low Fix reported
Apache Shiro Affected by an Observable Timing Discrepancy VulnerabilityCVE-2026-23901 · GHSA-C4QC-4Q9P-M9Q9 org.apache.shiro:shiro-coreRed Hat Fuse 7/shiro-core MavenRed Hat Low Fix reported
Apache Shiro: LDAP DN Injection in DefaultLdapRealmCVE-2026-49268 · GHSA-X96M-RH44-VGV8 org.apache.shiro:shiro-core Maven High Fix reported
Apache Shiro has a session fixation vulnerabilityCVE-2026-43827 · GHSA-FCVM-3CPJ-F9QX org.apache.shiro:shiro-coreRed Hat Fuse 7/shiro-core MavenRed Hat Medium Fix reported
Apache Shiro vulnerable to path traversalCVE-2023-46749 · GHSA-JC7H-C423-MPJC org.apache.shiro:shiro-coreRed Hat build of Apache Camel for Spring Boot 3/shiro MavenRed Hat Medium Fix reported
Improper Access Control in Apache ShiroCVE-2016-4437 · GHSA-P836-389H-J692 org.apache.shiro:shiro-coreRed Hat JBoss A-MQ 6/shiro-core MavenRed Hat Critical Fix reported
Improper input validation in Apache ShiroCVE-2019-12422 · GHSA-R679-M633-G7WC org.apache.shiro:shiro-coreRed Hat JBoss A-MQ 6/shiro-core MavenRed Hat High Fix reported
Authentication bypass in Apache ShiroCVE-2020-13933 · GHSA-2VGM-WXR3-6W2J org.apache.shiro:shiro-coreRed Hat JBoss Fuse 6/shiro-core MavenRed Hat High Fix reported
Apache Shiro vulnerable to a specially crafted HTTP request causing an authentication bypassCVE-2021-41303 · GHSA-F6JP-J6W3-W9HM org.apache.shiro:shiro-coreRed Hat Fuse 7/shiro-web MavenRed Hat Critical Fix reported
Apache Shiro Authentication Bypass vulnerabilityCVE-2022-40664 · GHSA-45X9-Q6VJ-CQGQ org.apache.shiro:shiro-coreRed Hat Fuse 7/shiro-core MavenRed Hat Critical Fix reported
Improper Authorization in Apache ShiroCVE-2022-32532 · GHSA-4CF5-XMHP-3XJ7 org.apache.shiro:shiro-coreRed Hat Fuse 7/shiro-core MavenRed Hat Critical Fix reported
Improper Authentication in Apache ShiroCVE-2020-1957 · GHSA-26GR-CVQ3-QXGF org.apache.shiro:shiro-coreRed Hat OpenStack Platform 10 (Newton)/opendaylight MavenRed Hat Critical Fix reported
Improper Authentication in Apache ShiroCVE-2020-11989 · GHSA-72W9-FCJ5-3FCG org.apache.shiro:shiro-coreRed Hat JBoss Fuse Service Works 6/shiro-core MavenRed Hat Critical Fix reported