You are viewing a plain text version of this content. The canonical link for it is here.

---

- [VOTE] Release Apache Shiro 2.1.0 - posted by Francois Papon <fp...@apache.org> on 2026/02/04 20:59:27 UTC, 3 replies.
- [RESULT][VOTE] Release Apache Shiro 2.1.0 - posted by Francois Papon <fp...@apache.org> on 2026/02/07 20:31:21 UTC, 0 replies.
- CVE-2026-23903: Apache Shiro: Auth bypass when accessing static files only on case-insensitive filesystems - posted by Lenny Primak <lp...@apache.org> on 2026/02/08 16:29:35 UTC, 0 replies.
- CVE-2026-23901: Apache Shiro: Brute force attack possible to determine valid user names - posted by Lenny Primak <lp...@apache.org> on 2026/02/08 16:30:14 UTC, 2 replies.
- [ANNOUNCE] Apache Shiro 2.1.0 released - posted by Francois Papon <fp...@apache.org> on 2026/02/08 16:53:25 UTC, 2 replies.
- Release 3.0.0-Alpha-1? - posted by le...@flowlogix.com on 2026/02/15 18:10:53 UTC, 1 replies.
- [VOTE] Release Apache Shiro 3.0.0-alpha-1 - posted by le...@flowlogix.com on 2026/02/23 20:51:28 UTC, 2 replies.
- [RESULT][VOTE] Release Apache Shiro 3.0.0-alpha-1 - posted by le...@flowlogix.com on 2026/02/27 21:48:06 UTC, 0 replies.