biz.jovido:jovido-webseed (>=0.0.1, <=0.0.1-fenicesfa), biz.jovido:jovido-webseed-fenicesfa (0.0.1) +368 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (1.13.4.release)

org.springframework.data:spring-data-commons MAVEN version 1.13.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - biz.jovido:jovido-webseed =0.0.1, =1.0.2, =1.0.2, =a.1.0.0,...

com.buession.security:buession-security-shiro (4.0.0), com.ctakit:ctakit-web (>=1.0.2, <=1.0.5) +61 more potentially affected by CVE-2026-43828 via org.apache.shiro:shiro-spring (>=2.0.0, <=2.1.0)

org.apache.shiro:shiro-spring MAVEN version =2.0.0, =1.0.2, =3.4.0, =3.3.0, =3.3.0, =3.3.0, =3.3.0, =3.3.0, =3.3.0, =4.1.0, =1.3.0.2.5, =4.0.39, =4.0.39, =4.6.78 and more Source cves: CVE-2026-43828 Source advisory: MEND:CVE-2026-43828...

biz.jovido:jovido-webseed (>=0.0.1, <=0.0.1-fenicesfa), biz.jovido:jovido-webseed-fenicesfa (0.0.1) +220 more potentially affected by CVE-2026-43512 via org.apache.tomcat.embed:tomcat-embed-core (8.5.15)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - biz.jovido:jovido-webseed =0.0.1, =1.0.1, =1.1.12, =1.1.12, =1.2.28, =1.1.2,...

cn.ocoop.framework:spring-in (>=1.0, <=1.0.3), cn.org.awcp:awcp-formdesigner-applicationimpl (1.0-release) +23 more potentially affected by CVE-2026-23903 via org.apache.shiro:shiro-spring (1.2.3)

org.apache.shiro:shiro-spring MAVEN version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-spring and may be impacted: - cn.ocoop.framework:spring-in =1.0, =1.0.0, =0.6, =1.0.0, =1.0.0, =2.1.10, =2.2.0 and more Source cves...

com.github.taccisum:shiro-starter (>=2.0, <=2.3.0), com.pramyness:shiro-redis-spring-boot-starter (>=2.2.8, <=2.2.10) +14 more potentially affected by CVE-2026-23903 via org.apache.shiro:shiro-spring (1.4.0-rc2)

org.apache.shiro:shiro-spring MAVEN version 1.4.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-spring and may be impacted: - com.github.taccisum:shiro-starter =2.0, =2.2.8, =2.2.10 -...

com.buession.security:buession-security-pac4j (>=1.1.1, <=1.1.2), com.buession.security:buession-security-shiro (>=1.1.1, <=1.1.2) +18 more potentially affected by CVE-2026-23903 via org.apache.shiro:shiro-spring (1.5.2)

org.apache.shiro:shiro-spring MAVEN version 1.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-spring and may be impacted: - com.buession.security:buession-security-pac4j =1.1.1, =1.1.1, =1.1.1, =1.1.1, =1.1.1, =1.1.1, =1.2,...

cn.easyproject:easyshiro-redis-cache (2.6.0-release), com.easycodebox:easycode-login (>=0.2.3, <=0.3.1) +5 more potentially affected by CVE-2026-23903 via org.apache.shiro:shiro-spring (1.2.6)

org.apache.shiro:shiro-spring MAVEN version 1.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-spring and may be impacted: - cn.easyproject:easyshiro-redis-cache 2.6.0-release - com.easycodebox:easycode-login =0.2.3, =5.15.5,...

com.easycodebox:easycode-login (>=0.1.0, <=0.2.2), com.jxrisesun:rs-java-framework-admin (>=0.1.3, <=0.1.5) +4 more potentially affected by CVE-2026-23903 via org.apache.shiro:shiro-spring (1.2.5)

org.apache.shiro:shiro-spring MAVEN version 1.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-spring and may be impacted: - com.easycodebox:easycode-login =0.1.0, =0.1.3, =0.1.3, =0.1.5 - org.apache.shiro.samples:samples-sprh...

cloud.opencode.base:opencode-base-token (1.0.0), com.ctakit:ctakit-web (>=1.0.2, <=1.0.5) +66 more potentially affected by CVE-2026-23903 via org.apache.shiro:shiro-spring (>=2.0.0-alpha-1, <=2.0.6)

org.apache.shiro:shiro-spring MAVEN version =2.0.0-alpha-1, =1.0.2, =3.4.0, =3.3.0, =3.3.0, =3.3.0, =3.3.0, =3.3.0, =3.3.0, =4.1.0, =1.3.0.2.5, =4.0.39, =4.0.39, =4.6.49 and more Source cves: CVE-2026-23903 Source advisory: OSV:GHSA-C244-P6M5-VQJ6...

org.apache.shiro.samples:samples-sprhib (1.2.0), org.apache.shiro.samples:samples-spring (1.2.0) +4 more potentially affected by CVE-2026-23903 via org.apache.shiro:shiro-spring (1.2.0)

org.apache.shiro:shiro-spring MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-spring and may be impacted: - org.apache.shiro.samples:samples-sprhib 1.2.0 - org.apache.shiro.samples:samples-spring 1.2.0 -...

org.apache.shiro.samples:samples-sprhib (1.0.0-incubating), org.apache.shiro.samples:samples-spring (1.0.0-incubating) +4 more potentially affected by CVE-2026-23903 via org.apache.shiro:shiro-spring (1.0.0-incubating)

org.apache.shiro:shiro-spring MAVEN version 1.0.0-incubating is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-spring and may be impacted: - org.apache.shiro.samples:samples-sprhib 1.0.0-incubating -...

cc.eamon.open:auth (0.0.2), cn.iisme.cloud:iisme-demos-shiro-web (1.0.1) +86 more potentially affected by CVE-2026-23903 via org.apache.shiro:shiro-spring (1.5.3)

org.apache.shiro:shiro-spring MAVEN version 1.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-spring and may be impacted: - cc.eamon.open:auth 0.0.2 - cn.iisme.cloud:iisme-demos-shiro-web 1.0.1 -...

cn.acooly:acooly-auth-wechat-authenticator (>=5.2.1, <=5.2.2), cn.com.jeeweb:jeeweb-core (>=1.0.0, <=1.0.1) +85 more potentially affected by CVE-2026-23903 via org.apache.shiro:shiro-spring (1.7.0)

org.apache.shiro:shiro-spring MAVEN version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-spring and may be impacted: - cn.acooly:acooly-auth-wechat-authenticator =5.2.1, =1.0.0, =5.2.1, =5.2.1, =5.2.1, =5.2.1, =5.2.1,...

cn.xuqiudong.basic:lcxm-cas-sso (>=1.0.1-2024, <=1.0.2-2024), cn.xuqiudong.basic:lcxm-cas-sso-client (>=1.0.1-2024, <=1.0.2-2024) +32 more potentially affected by CVE-2026-23903 via org.apache.shiro:shiro-spring (1.6.0)

org.apache.shiro:shiro-spring MAVEN version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-spring and may be impacted: - cn.xuqiudong.basic:lcxm-cas-sso =1.0.1-2024, =1.0.1-2024, =1.0.1-2024, =1.0, =2.0.0.release,...

com.googlecode.wicketelements:security-shiro (>=1.0, <=1.3.0), org.apache.shiro.samples:samples-sprhib (1.1.0) +5 more potentially affected by CVE-2026-23903 via org.apache.shiro:shiro-spring (1.1.0)

org.apache.shiro:shiro-spring MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-spring and may be impacted: - com.googlecode.wicketelements:security-shiro =1.0, =1.5-rc2.1, =1.4.14, =1.4.14, =1.5.13 Source cves:...

com.buession.security:buession-security-shiro (>=2.2.0, <=2.3.0), com.buession.springboot:buession-springboot-shiro (>=2.2.0, <=2.3.0) +60 more potentially affected by CVE-2026-23903 via org.apache.shiro:shiro-spring (1.11.0)

org.apache.shiro:shiro-spring MAVEN version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-spring and may be impacted: - com.buession.security:buession-security-shiro =2.2.0, =2.2.0, =2.9.0, =2.9.0, =2.9.0, =3.0.0-beta,...

com.diboot:diboot-file-spring-boot-starter (2.6.0), com.diboot:diboot-iam-spring-boot-starter (2.6.0) +77 more potentially affected by CVE-2026-23903 via org.apache.shiro:shiro-spring (1.9.0)

org.apache.shiro:shiro-spring MAVEN version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-spring and may be impacted: - com.diboot:diboot-file-spring-boot-starter 2.6.0 - com.diboot:diboot-iam-spring-boot-starter 2.6.0 -...

cloud.opencode.base:opencode-base-token (1.0.0), com.ctakit:ctakit-web (>=1.0.2, <=1.0.5) +66 more potentially affected by CVE-2026-23903 via org.apache.shiro:shiro-spring (>=2.0.0-alpha-1, <=2.0.6)

org.apache.shiro:shiro-spring MAVEN version =2.0.0-alpha-1, =1.0.2, =3.4.0, =3.3.0, =3.3.0, =3.3.0, =3.3.0, =3.3.0, =3.3.0, =4.1.0, =1.3.0.2.5, =4.0.39, =4.0.39, =4.6.49 and more Source cves: CVE-2026-23903 Source advisory: GHSA-C244-P6M5-VQJ6...

com.github.dactiv.showcase:dactiv-base-curd (>=1.0.0.release, <=1.1.0.release), com.github.jnoee:coo.core.security (>=2.1.3, <=2.1.9) +27 more potentially affected by CVE-2026-23903 via org.apache.shiro:shiro-spring (1.2.2)

org.apache.shiro:shiro-spring MAVEN version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-spring and may be impacted: - com.github.dactiv.showcase:dactiv-base-curd =1.0.0.release, =2.1.3, =2.1.3, =1.0, =1.0, =1.0, =1.0.3,...

com.buession.security:buession-security-shiro (2.3.1), com.buession.springboot:buession-springboot-shiro (2.3.1) +48 more potentially affected by CVE-2026-23903 via org.apache.shiro:shiro-spring (1.12.0)

org.apache.shiro:shiro-spring MAVEN version 1.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-spring and may be impacted: - com.buession.security:buession-security-shiro 2.3.1 -...