be.fluid-it.guice.extensions:guice-multi-shiro-realms (0.1-1), be.fluid-it.shiro.jee:shiro-jee-authc (>=0.1-1, <=0.1-3) +3122 more potentially affected by CVE-2026-43827 via org.apache.shiro:shiro-core (>=1.0.0-incubating, <=2.1.0)

org.apache.shiro:shiro-core MAVEN version =1.0.0-incubating, =0.1-1, =4.0.0-beta-1, =1.0.0, =0.0.1, =1.0.0, =0.0.2, =0.0.21, =0.0.27, =0.0.2, =0.0.27, =0.0.1, =1.0.30 - cc.eamon.open:auth 0.0.2 - cc.ereach:ereach-permission 1.0.1 and more Source cves: CVE-2026-43827 Source advisory:...

be.fluid-it.guice.extensions:guice-multi-shiro-realms (0.1-1), be.fluid-it.shiro.jee:shiro-jee-authc (>=0.1-1, <=0.1-3) +3122 more potentially affected by CVE-2026-43827 via org.apache.shiro:shiro-core (>=1.0.0-incubating, <=2.1.0)

org.apache.shiro:shiro-core MAVEN version =1.0.0-incubating, =0.1-1, =4.0.0-beta-1, =1.0.0, =0.0.1, =1.0.0, =0.0.2, =0.0.21, =0.0.27, =0.0.2, =0.0.27, =0.0.1, =1.0.30 - cc.eamon.open:auth 0.0.2 - cc.ereach:ereach-permission 1.0.1 and more Source cves: CVE-2026-43827 Source advisory:...

CVE-2026-43827

creationtimestamp| type| source ---|---|--- 2026-05-26 08:53:19+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mmqmka7upy25...

DEBIAN-CVE-2026-43827

Default configurations of Apache Shiro have a session fixation vulnerability. This issue affects Apache Shiro from 1.0 to 2.1.0, and 3.0.0-alpha-1. Users are recommended to upgrade to version 2.1.1, or 3.0.0-alpha-2 or later, which fixes the issue. In the affected versions, when a session already...

com.nb6868.onex:common (5.0.3), com.nb6868.onex:file-converter (5.0.3) +20 more potentially affected by CVE-2026-43827 via org.apache.shiro:shiro-core (3.0.0-alpha-1)

org.apache.shiro:shiro-core MAVEN version 3.0.0-alpha-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-core and may be impacted: - com.nb6868.onex:common 5.0.3 - com.nb6868.onex:file-converter 5.0.3 - com.nb6868.onex:job 5.0.3 -...