org.apache.shiro:shiro-core vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-49268Highorg.apache.shiro:shiro-core: Apache Shiro: LDAP DN Injection in DefaultLdapRealm CVE-2026-43827Mediumorg.apache.shiro:shiro-core: Apache Shiro has a session fixation vulnerability CVE-2026-23901Loworg.apache.shiro:shiro-core: Apache Shiro Affected by an Observable Timing Discrepancy Vulnerability CVE-2023-46749Mediumorg.apache.shiro:shiro-core: Apache Shiro vulnerable to path traversal CVE-2022-40664Criticalorg.apache.shiro:shiro-core: Apache Shiro Authentication Bypass vulnerability CVE-2022-32532Criticalorg.apache.shiro:shiro-core: Improper Authorization in Apache Shiro CVE-2016-4437Criticalorg.apache.shiro:shiro-core: Improper Access Control in Apache Shiro CVE-2021-41303Criticalorg.apache.shiro:shiro-core: Apache Shiro vulnerable to a specially crafted HTTP request causing an authentication bypass CVE-2020-13933Highorg.apache.shiro:shiro-core: Authentication bypass in Apache Shiro CVE-2020-1957Criticalorg.apache.shiro:shiro-core: Improper Authentication in Apache Shiro CVE-2020-11989Criticalorg.apache.shiro:shiro-core: Improper Authentication in Apache Shiro CVE-2019-12422Highorg.apache.shiro:shiro-core: Improper input validation in Apache Shiro

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo