CVE-2026-23901 vulnerabilities

Vulnerabilities for packages: neo4j, apache-jena-fuseki...

ca.ibodrov.concord:testcontainers-concord (>=0.0.2, <=0.0.20), ca.ibodrov.concord:testcontainers-concord-core (>=0.0.21, <=0.0.41) +144 more potentially affected by CVE-2026-23901 via org.apache.shiro:shiro-core (1.5.1)

org.apache.shiro:shiro-core MAVEN version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-core and may be impacted: - ca.ibodrov.concord:testcontainers-concord =0.0.2, =0.0.21, =0.0.1, =1.0.0, =2.0.5, =2.0.9, =2.0.9, =2.0.5...

com.diboot:diboot-file-spring-boot-starter (2.6.0), com.diboot:diboot-iam-spring-boot-starter (2.6.0) +155 more potentially affected by CVE-2026-23901 via org.apache.shiro:shiro-core (1.9.0)

org.apache.shiro:shiro-core MAVEN version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-core and may be impacted: - com.diboot:diboot-file-spring-boot-starter 2.6.0 - com.diboot:diboot-iam-spring-boot-starter 2.6.0 -...

com.abasecode.opencode:abasecode-base-token (>=1.0.0, <=1.0.3), com.bazaarvoice.emodb:emodb-auth-core (>=6.5.24, <=6.5.27) +312 more potentially affected by CVE-2026-23901 via org.apache.shiro:shiro-core (1.9.1)

org.apache.shiro:shiro-core MAVEN version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-core and may be impacted: - com.abasecode.opencode:abasecode-base-token =1.0.0, =6.5.24, =6.5.24, =6.5.24, =6.5.24, =6.5.24, =2.0.0,...

Linux Distros Unpatched Vulnerability : CVE-2026-23901

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Observable Timing Discrepancy vulnerability in Apache Shiro. This issue affects Apache Shiro: from 1., 2. before 2.0.7. Users are recommended to upgrade to...