Skip to content

org.apache.shiro:shiro-jakarta-ee vulnerabilities (Maven)

2 vulnerabilities.

org.apache.shiro:shiro-jakarta-ee MavenApache Shiro: Jakarta EE open redirect via untrusted Referer in post-login redirect flowCVE-2026-48589Fix available0.0 NoneMay 25, 2026
org.apache.shiro:shiro-jakarta-ee MavenApache Shiro Jakarta EE module: Open redirect and SSRF (requires valid credentials)CVE-2026-44598Fix available5.1 MediumMay 25, 2026