You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@knox.apache.org by "PJ Fanning (Jira)" <ji...@apache.org> on 2026/07/23 17:09:00 UTC

[jira] [Created] (KNOX-3392) Upgrade Shiro to 2.2.1 due to CVEs

PJ Fanning created KNOX-3392:
--------------------------------

             Summary: Upgrade Shiro to 2.2.1 due to CVEs
                 Key: KNOX-3392
                 URL: https://issues.apache.org/jira/browse/KNOX-3392
             Project: Apache Knox
          Issue Type: Task
            Reporter: PJ Fanning


[https://github.com/apache/knox/blob/master/pom.xml#L275|https://github.com/pjfanning/knox/blob/master/pom.xml#L275]

1.13.0 is very out of date

3 CVEs in that version according to https://mvnrepository.com/artifact/org.apache.shiro/shiro-core

 



--
This message was sent by Atlassian Jira
(v8.20.10#820010)