SH
Product
Shiro
by Apache · last CVE Aug 31, 2026
On CISA KEVExploited in the wild
25
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 4Medium 8Low 1
Watch

Add Shiro to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-23901
2.5
0%
Feb 10
Observable Timing Discrepancy vulnerability in Apache Shiro
Affected: before 2.0.7
Showing 1