Skip to content
OpenAdvisories

Package · Maven

org.apache.shiro:shiro-guice

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.2
    CVE-2026-56091

    Apache Shiro: Authentication bypass in Guice-Web integration

    When using Apache Shiro with the shiro-guice module in a web servlet context, a specially crafted HTTP request may cause an authentication bypass. This vulnerability is similar to https://www.cve.org/CVERecord?id=CVE-2020-1957 https://www.cve.org/CVERecord , …

    Apache Software Foundation Apache Shiro shiro shiro Debian Ubuntu Maven