35 matches found
com.netflix.ndbench:ndbench-cli (>=0.3.12, <=0.7.4), com.netflix.ndbench:ndbench-geode-plugins (>=0.3.5, <=0.7.4) +4 more potentially affected by CVE-2026-23903 via org.apache.shiro:shiro-spring (1.3.1)
org.apache.shiro:shiro-spring MAVEN version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-spring and may be impacted: - com.netflix.ndbench:ndbench-cli =0.3.12, =0.3.5, =0.7.4 - org.apache.shiro.samples:samples-sprhib 1.3...
com.mtons:mtons-shiro (1.2.3), org.apache.shiro.samples:samples-sprhib (1.2.1) +6 more potentially affected by CVE-2026-23903 via org.apache.shiro:shiro-spring (1.2.1)
org.apache.shiro:shiro-spring MAVEN version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-spring and may be impacted: - com.mtons:mtons-shiro 1.2.3 - org.apache.shiro.samples:samples-sprhib 1.2.1 -...
com.buession.security:buession-security-pac4j (>=1.2.1, <=1.3.1), com.buession.security:buession-security-shiro (>=1.2.1, <=1.3.1) +152 more potentially affected by CVE-2026-23903 via org.apache.shiro:shiro-spring (1.7.1)
org.apache.shiro:shiro-spring MAVEN version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-spring and may be impacted: - com.buession.security:buession-security-pac4j =1.2.1, =1.2.1, =1.2.1, =1.2.1, =1.2.1, =1.2.1, =1.0.2,...
com.gccloud:gc-starter-authority-controller (2.1.0.2022112402.release), com.gccloud:gc-starter-authority-service (2.1.0.2022112402.release) +65 more potentially affected by CVE-2026-23903 via org.apache.shiro:shiro-spring (1.10.0)
org.apache.shiro:shiro-spring MAVEN version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-spring and may be impacted: - com.gccloud:gc-starter-authority-controller 2.1.0.2022112402.release -...
cn.jbone:jbone-sso-client (1.0.0), cn.org.faster:faster-admin (1.0.0.release) +269 more potentially affected by CVE-2026-23903 via org.apache.shiro:shiro-spring (1.4.0)
org.apache.shiro:shiro-spring MAVEN version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-spring and may be impacted: - cn.jbone:jbone-sso-client 1.0.0 - cn.org.faster:faster-admin 1.0.0.release -...
com.github.taccisum:shiro-starter (>=2.0, <=2.3.0), com.pramyness:shiro-redis-spring-boot-starter (>=2.2.8, <=2.2.10) +14 more potentially affected by CVE-2026-23903 via org.apache.shiro:shiro-spring (1.4.0-rc2)
org.apache.shiro:shiro-spring MAVEN version 1.4.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-spring and may be impacted: - com.github.taccisum:shiro-starter =2.0, =2.2.8, =2.2.10 -...
com.buession.security:buession-security-shiro (>=2.3.2, <=3.0.1), com.buession.springboot:buession-springboot-shiro (>=2.3.2, <=3.0.1) +209 more potentially affected by CVE-2026-23903 via org.apache.shiro:shiro-spring (1.13.0)
org.apache.shiro:shiro-spring MAVEN version 1.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-spring and may be impacted: - com.buession.security:buession-security-shiro =2.3.2, =2.3.2, =2.11.0, =2.11.0, =2.11.0, =3.2.0,...
cloud.opencode.base:opencode-base-token (1.0.0), io.github.junxworks:junx-ep-auth (>=2.0.0, <=2.1.0) +11 more potentially affected by CVE-2023-46750 via org.apache.shiro:shiro-web (>=2.0.0-alpha-1, <=2.0.0-alpha-3)
org.apache.shiro:shiro-web MAVEN version =2.0.0-alpha-1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-3 Source cves: CVE-2023-46750 Source advisory: OSV:GHSA-HHW5-C326-822H...
cloud.opencode.base:opencode-base-token (1.0.0), io.github.junxworks:junx-ep-auth (>=2.0.0, <=2.1.0) +11 more potentially affected by CVE-2023-34478 via org.apache.shiro:shiro-web (>=2.0.0-alpha-1, <=2.0.0-alpha-2)
org.apache.shiro:shiro-web MAVEN version =2.0.0-alpha-1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-2 Source cves: CVE-2023-34478 Source advisory: MEND:CVE-2023-34478...
com.alibaba.p3c.idea:p3c-common (1.0.0), com.alibaba.p3c:p3c-pmd (>=1.0.0, <=1.3.6) +30 more potentially affected by CVE-2019-7722 via net.sourceforge.pmd:pmd-core (5.5.2)
net.sourceforge.pmd:pmd-core MAVEN version 5.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.pmd:pmd-core and may be impacted: - com.alibaba.p3c.idea:p3c-common 1.0.0 - com.alibaba.p3c:p3c-pmd =1.0.0, =0.0.1, =0.0.7 -...
com.alibaba.p3c.idea:p3c-common (1.0.0), com.alibaba.p3c:p3c-pmd (>=1.0.0, <=1.3.6) +65 more potentially affected by CVE-2019-7722 via net.sourceforge.pmd:pmd-core (>=5.2.0, <=5.8.1)
net.sourceforge.pmd:pmd-core MAVEN version =5.2.0, =1.0.0, =0.1.0, =0.1.0, =2.14.1, =0.1.0, =1.7.2, =1.4.2, =1.0.0, =1.2.1, =1.2.1, =1.0.0, =1.0.1 and more Source cves: CVE-2019-7722 Source advisory: GHSA-57QJ-79GH-69W8...
cn.iisme.cloud:iisme-demos-shiro-web (1.0.1), cn.iisme.cloud:iisme-starter-shiro (1.0.1) +69 more potentially affected by CVE-2020-17523 via org.apache.shiro:shiro-spring-boot-starter (>=1.4.0-rc2, <=1.7.0)
org.apache.shiro:shiro-spring-boot-starter MAVEN version =1.4.0-rc2, =1.1.1, =0.0.6, =0.0.6, =2.1.1, =2.0.4-rc1, =2.2.0, =2.2.0, =1.0.0, =1.0.1 and more Source cves: CVE-2020-17523 Source advisory: OSV:GHSA-V98J-7CRC-WVRJ...
cn.iisme.cloud:iisme-demos-shiro-web (1.0.1), cn.iisme.cloud:iisme-starter-shiro (1.0.1) +69 more potentially affected by CVE-2020-17523 via org.apache.shiro:shiro-spring-boot-starter (>=1.4.0-rc2, <=1.7.0)
org.apache.shiro:shiro-spring-boot-starter MAVEN version =1.4.0-rc2, =1.1.1, =0.0.6, =0.0.6, =2.1.1, =2.0.4-rc1, =2.2.0, =2.2.0, =1.0.0, =1.0.1 and more Source cves: CVE-2020-17523 Source advisory: GHSA-V98J-7CRC-WVRJ...
cn.iisme.cloud:iisme-demos-shiro-web (1.0.1), cn.iisme.cloud:iisme-starter-shiro (1.0.1) +69 more potentially affected by CVE-2020-17523 via org.apache.shiro:shiro-spring-boot-starter (>=1.4.0-rc2, <=1.7.0)
org.apache.shiro:shiro-spring-boot-starter MAVEN version =1.4.0-rc2, =1.1.1, =0.0.6, =0.0.6, =2.1.1, =2.0.4-rc1, =2.2.0, =2.2.0, =1.0.0, =1.0.1 and more Source cves: CVE-2020-17523 Source advisory: MEND:CVE-2020-17523...
