Critical DLA-2726-1 2 CVEs

shiro - security update

Published Aug 2, 2021 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 9	shiro	1.3.2-1+deb9u2

Vulnerabilities 2

Critical 9.8

CVE-2020-17510

Authentication bypass in Apache Shiro

Apache Shiro before 1.7.0, when using Apache Shiro with Spring, a specially crafted HTTP request may cause an authentication bypass.

shiro shiro org.apache.shiro:shiro-spring Debian Ubuntu Maven

Nov 5, 2020
High 7.5

CVE-2020-13933 Public exploit EPSS 44%

Authentication bypass in Apache Shiro

Apache Shiro before 1.6.0, when using Apache Shiro, a specially crafted HTTP request may cause an authentication bypass.

shiro shiro org.apache.shiro:shiro-core Debian Ubuntu Maven

Aug 17, 2020