ca.ibodrov.concord:mcp-for-concord (>=0.0.1, <=0.0.2), ca.ibodrov.concord:testcontainers-concord-core (>=2.0.3, <=2.0.6) +266 more potentially affected by CVE-2026-56091 via org.apache.shiro:shiro-web (>=2.0.0-alpha-1, <=3.0.0-alpha-1)

org.apache.shiro:shiro-web MAVEN version =2.0.0-alpha-1, =0.0.1, =2.0.3, =0.0.27, =0.0.27, =0.0.27, =8.0.0, =8.0.0, =4.0.0, =1.0.2, =3.4.0, =3.3.0, =3.3.0, =3.3.0, =3.9.1 and more Source cves: CVE-2026-56091 Source advisory: SNYK:JAVA-ORGAPACHESHIRO-17756771...

br.eti.arthurgregorio:shiro-ee (>=1.0.0, <=1.5.1), ca.ibodrov.concord:mcp-for-concord (>=0.0.1, <=0.0.2) +1661 more potentially affected by CVE-2026-56130 via org.apache.shiro:shiro-web (>=1.2.4, <=3.0.0-alpha-1)

org.apache.shiro:shiro-web MAVEN version =1.2.4, =1.0.0, =0.0.1, =1.0.0, =0.0.2, =0.0.21, =0.0.27, =0.0.2, =0.0.27, =0.0.1, =1.0.2, =1.0.0, =1.0.0, =2.0.0 and more Source cves: CVE-2026-56130 Source advisory: SNYK:JAVA-ORGAPACHESHIRO-17756767...

com.nb6868.onex:common (5.0.3), com.nb6868.onex:file-converter (5.0.3) +14 more potentially affected by CVE-2026-43828 via org.apache.shiro:shiro-web (3.0.0-alpha-1)

org.apache.shiro:shiro-web MAVEN version 3.0.0-alpha-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-web and may be impacted: - com.nb6868.onex:common 5.0.3 - com.nb6868.onex:file-converter 5.0.3 - com.nb6868.onex:job 5.0.3 -...

com.nb6868.onex:common (5.0.3), com.nb6868.onex:file-converter (5.0.3) +14 more potentially affected by CVE-2026-43828 via org.apache.shiro:shiro-web (3.0.0-alpha-1)

org.apache.shiro:shiro-web MAVEN version 3.0.0-alpha-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-web and may be impacted: - com.nb6868.onex:common 5.0.3 - com.nb6868.onex:file-converter 5.0.3 - com.nb6868.onex:job 5.0.3 -...

com.nb6868.onex:common (5.0.3), com.nb6868.onex:file-converter (5.0.3) +14 more potentially affected by CVE-2026-43827 via org.apache.shiro:shiro-web (3.0.0-alpha-1)

org.apache.shiro:shiro-web MAVEN version 3.0.0-alpha-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-web and may be impacted: - com.nb6868.onex:common 5.0.3 - com.nb6868.onex:file-converter 5.0.3 - com.nb6868.onex:job 5.0.3 -...

com.nb6868.onex:common (5.0.3), com.nb6868.onex:file-converter (5.0.3) +14 more potentially affected by CVE-2026-43828 via org.apache.shiro:shiro-web (3.0.0-alpha-1)

org.apache.shiro:shiro-web MAVEN version 3.0.0-alpha-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-web and may be impacted: - com.nb6868.onex:common 5.0.3 - com.nb6868.onex:file-converter 5.0.3 - com.nb6868.onex:job 5.0.3 -...

ca.ibodrov.concord:mcp-for-concord (>=0.0.1, <=0.0.2), ca.ibodrov.concord:testcontainers-concord-core (>=2.0.3, <=2.0.6) +195 more potentially affected by CVE-2026-43828 via org.apache.shiro:shiro-web (>=2.0.0-alpha-1, <=2.1.0)

org.apache.shiro:shiro-web MAVEN version =2.0.0-alpha-1, =0.0.1, =2.0.3, =0.0.27, =0.0.27, =0.0.27, =8.0.0, =8.0.0, =1.0.2, =3.4.0, =3.3.0, =3.3.0, =3.3.0, =3.3.0, =3.8.0 and more Source cves: CVE-2026-43828 Source advisory: SNYK:JAVA-ORGAPACHESHIRO-17116502...

com.nb6868.onex:common (5.0.3), com.nb6868.onex:file-converter (5.0.3) +14 more potentially affected by CVE-2026-43828 via org.apache.shiro:shiro-web (3.0.0-alpha-1)

org.apache.shiro:shiro-web MAVEN version 3.0.0-alpha-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-web and may be impacted: - com.nb6868.onex:common 5.0.3 - com.nb6868.onex:file-converter 5.0.3 - com.nb6868.onex:job 5.0.3 -...

com.nb6868.onex:common (5.0.3), com.nb6868.onex:file-converter (5.0.3) +14 more potentially affected by CVE-2026-43827 via org.apache.shiro:shiro-web (3.0.0-alpha-1)

org.apache.shiro:shiro-web MAVEN version 3.0.0-alpha-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-web and may be impacted: - com.nb6868.onex:common 5.0.3 - com.nb6868.onex:file-converter 5.0.3 - com.nb6868.onex:job 5.0.3 -...

br.com.caelum.vraptor:vraptor-shiro (>=4.0.0-beta-1, <=4.0.0-rc2), br.eti.arthurgregorio:shiro-ee (>=1.0.0, <=1.5.1) +1858 more potentially affected by CVE-2026-23903 via org.apache.shiro:shiro-web (>=1.0.0-incubating, <=2.0.6)

org.apache.shiro:shiro-web MAVEN version =1.0.0-incubating, =4.0.0-beta-1, =1.0.0, =1.0.0, =0.0.2, =0.0.21, =0.0.27, =0.0.2, =0.0.27, =0.0.1, =1.0.2, =1.0.0, =1.0.0, =2.0.0 and more Source cves: CVE-2026-23903 Source advisory: MEND:CVE-2026-23903...

br.com.caelum.vraptor:vraptor-shiro (>=4.0.0-beta-1, <=4.0.0-rc2), br.eti.arthurgregorio:shiro-ee (>=1.0.0, <=1.5.1) +1665 more potentially affected by CVE-2023-46750 via org.apache.shiro:shiro-web (>=1.0.0-incubating, <=1.12.0)

org.apache.shiro:shiro-web MAVEN version =1.0.0-incubating, =4.0.0-beta-1, =1.0.0, =0.0.2, =0.0.21, =0.0.2, =0.0.1, =1.0.2, =1.0.0, =1.0.0, =5.2.1, =1.0.0, =0.1, =0.1, =0.2 and more Source cves: CVE-2023-46750 Source advisory: OSV:GHSA-HHW5-C326-822H...

br.com.caelum.vraptor:vraptor-shiro (>=4.0.0-beta-1, <=4.0.0-rc2), br.eti.arthurgregorio:shiro-ee (>=1.0.0, <=1.5.1) +1665 more potentially affected by CVE-2023-46750 via org.apache.shiro:shiro-web (>=1.0.0-incubating, <=1.12.0)

org.apache.shiro:shiro-web MAVEN version =1.0.0-incubating, =4.0.0-beta-1, =1.0.0, =0.0.2, =0.0.21, =0.0.2, =0.0.1, =1.0.2, =1.0.0, =1.0.0, =5.2.1, =1.0.0, =0.1, =0.1, =0.2 and more Source cves: CVE-2023-46750 Source advisory: GHSA-HHW5-C326-822H...

cloud.opencode.base:opencode-base-token (1.0.0), io.github.junxworks:junx-ep-auth (>=2.0.0, <=2.1.0) +11 more potentially affected by CVE-2023-46750 via org.apache.shiro:shiro-web (>=2.0.0-alpha-1, <=2.0.0-alpha-3)

org.apache.shiro:shiro-web MAVEN version =2.0.0-alpha-1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-3 Source cves: CVE-2023-46750 Source advisory: MEND:CVE-2023-46750...

Path Traversal

org.apache.shiro:shiro-web is vulnerable to Path Traversal. The vulnerability exists in InvalidRequestFilter.java because it does not properly validate downloaded files for subpaths, which allows an attacker to to write to a directory outside the restricted path...

br.com.caelum.vraptor:vraptor-shiro (>=4.0.0-beta-1, <=4.0.0-rc2), br.eti.arthurgregorio:shiro-ee (>=1.0.0, <=1.5.1) +1660 more potentially affected by CVE-2023-34478 via org.apache.shiro:shiro-web (>=1.0.0-incubating, <=1.11.0)

org.apache.shiro:shiro-web MAVEN version =1.0.0-incubating, =4.0.0-beta-1, =1.0.0, =0.0.2, =0.0.21, =0.0.2, =0.0.1, =1.0.2, =1.0.0, =1.0.0, =5.2.1, =1.0.0, =0.1, =0.1, =0.2 and more Source cves: CVE-2023-34478 Source advisory: OSV:GHSA-PMHC-2G4F-85CG...

cloud.opencode.base:opencode-base-token (1.0.0), io.github.junxworks:junx-ep-auth (>=2.0.0, <=2.1.0) +11 more potentially affected by CVE-2023-34478 via org.apache.shiro:shiro-web (>=2.0.0-alpha-1, <=2.0.0-alpha-2)

org.apache.shiro:shiro-web MAVEN version =2.0.0-alpha-1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-2 Source cves: CVE-2023-34478 Source advisory: GHSA-PMHC-2G4F-85CG...

br.com.caelum.vraptor:vraptor-shiro (>=4.0.0-beta-1, <=4.0.0-rc2), cn.dreampie:jfinal-dreampie (>=0.1, <=1.2.2) +436 more potentially affected by CVE-2016-6802 via org.apache.shiro:shiro-web (>=1.0.0-incubating, <=1.3.1)

org.apache.shiro:shiro-web MAVEN version =1.0.0-incubating, =4.0.0-beta-1, =0.1, =0.1, =0.1, =2.1.0-release, =1.0, =1.0.0, =0.9.1, =0.1.1, =0.9.0 and more Source cves: CVE-2016-6802 Source advisory: OSV:GHSA-4Q2V-J639-CP7P...

br.com.caelum.vraptor:vraptor-shiro (>=4.0.0-beta-1, <=4.0.0-rc2), br.eti.arthurgregorio:shiro-ee (>=1.0.0, <=1.5.1) +1510 more potentially affected by CVE-2020-17523 via org.apache.shiro:shiro-web (>=1.0.0-incubating, <=1.7.0)

org.apache.shiro:shiro-web MAVEN version =1.0.0-incubating, =4.0.0-beta-1, =1.0.0, =0.0.2, =0.0.21, =0.0.1, =1.0.0, =5.2.1, =1.0.0, =0.1, =0.1, =0.1, =2.1.0-release, =2.6.0-release - cn.easyproject:easyshiro-redis-cache 2.6.0-release - cn.hll520.linling:linling-app 1.2.0 and more Source cves:...

br.com.caelum.vraptor:vraptor-shiro (>=4.0.0-beta-1, <=4.0.0-rc2), cn.dreampie:jfinal-dreampie (>=0.1, <=1.2.2) +436 more potentially affected by CVE-2016-6802 via org.apache.shiro:shiro-web (>=1.0.0-incubating, <=1.3.1)

org.apache.shiro:shiro-web MAVEN version =1.0.0-incubating, =4.0.0-beta-1, =0.1, =0.1, =0.1, =2.1.0-release, =1.0, =1.0.0, =0.9.1, =0.1.1, =0.9.0 and more Source cves: CVE-2016-6802 Source advisory: MEND:CVE-2016-6802...