You are viewing a plain text version of this content. The canonical link for it is here.

---

- [ANNOUNCE] Apache Shiro 1.12.0 released - posted by fpapon <fp...@apache.org> on 2023/07/21 13:41:52 UTC, 0 replies.
- [ANNOUNCE][CVE-2023-34478] Apache Shiro 1.12.0 released - posted by fpapon <fp...@apache.org> on 2023/07/21 13:45:34 UTC, 0 replies.
- CVE-2023-34478: Apache Shiro before 1.12.0, or 2.0.0-alpha-3, may be susceptible to a path traversal attack when used together with APIs or other web frameworks that route requests based on non-normalized requests. - posted by Brian Demers <bd...@apache.org> on 2023/07/24 18:06:06 UTC, 0 replies.