Apache Aurora vulnerabilities

• apache aurora Apache Aurora: padding oracle can allow construction an authentication cookie CVE-2024-27905 9.1 CriticalFebruary 27, 2024
• apache shiro, aurora, redhat fuse +1 more +3 more Improper Access Control in Apache Shiro CVE-2016-4437 In KEVPublic exploitFix available EPSS 93.0% 9.8 CriticalJune 7, 2016