Start for Free
maven

org.apache.shiro:shiro-core

View on maven registry
13 Total advisories
13 Vulnerabilities
0 Malware

Dependency scanning

Check whether org.apache.shiro:shiro-core is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

Explore dependency scanning Explore AI SAST →

Vulnerabilities

UNKNOWN
Maven

CVE-2026-56130

Apache Shiro's "remember me" cookie age is not verified on the server.
UNKNOWN
Maven

CVE-2026-23901

Apache Shiro Affected by an Observable Timing Discrepancy Vulnerability
UNKNOWN
Maven

CVE-2026-49268

Apache Shiro: LDAP DN Injection in DefaultLdapRealm
UNKNOWN
Maven

CVE-2026-43827

Apache Shiro has a session fixation vulnerability
MEDIUM 6.5
Maven

CVE-2023-46749

Apache Shiro vulnerable to path traversal
CRITICAL 9.8
Maven KEV

CVE-2016-4437

Improper Access Control in Apache Shiro
HIGH 7.5
Maven

CVE-2019-12422

Improper input validation in Apache Shiro
HIGH 7.5
Maven

CVE-2020-13933

Authentication bypass in Apache Shiro
CRITICAL 9.8
Maven

CVE-2021-41303

Apache Shiro vulnerable to a specially crafted HTTP request causing an authentication bypass
CRITICAL 9.8
Maven

CVE-2022-40664

Apache Shiro Authentication Bypass vulnerability
CRITICAL 9.8
Maven

CVE-2022-32532

Improper Authorization in Apache Shiro
CRITICAL 9.8
Maven

CVE-2020-1957

Improper Authentication in Apache Shiro
CRITICAL 9.8
Maven

CVE-2020-11989

Improper Authentication in Apache Shiro

Browse more Maven advisories

Learn What is SAST?

Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes