Skip to content
OpenAdvisories

Package · Maven

org.apache.shiro:shiro-spring

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-23903

    Apache Shiro: Auth bypass when accessing static files only on case-insensitive filesystems

    Authentication Bypass by Alternate Name vulnerability in Apache Shiro. This issue affects Apache Shiro: before 2.0.7. Users are recommended to upgrade to version 2.0.7, which fixes the issue. The issue only effects static files. If static files are served fro…

    Apache Software Foundation Apache Shiro shiro shiro Debian Ubuntu Maven