org.apache.shiro:shiro-spring vulnerabilities (Maven)

3 vulnerabilities.

• org.apache.shiro:shiro-spring Maven Apache Shiro: Auth bypass when accessing static files only on case-insensitive filesystems CVE-2026-23903 Fix available 5.3 MediumFebruary 9, 2026
• org.apache.shiro:shiro-spring Maven Authentication bypass in Apache Shiro CVE-2020-17523 Public exploitFix available EPSS 85.9% 9.8 CriticalFebruary 3, 2021
• org.apache.shiro:shiro-spring Maven Authentication bypass in Apache Shiro CVE-2020-17510 Fix available 9.8 CriticalNovember 5, 2020