| Bug | jessie | stretch | buster | bullseye | sid | Description |
|---|
| CVE-2020-1957 | vulnerable | vulnerable | vulnerable | vulnerable | vulnerable | Apache Shiro before 1.5.2, when using Apache Shiro with Spring dynamic ... |
| CVE-2019-12422 | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable | vulnerable | Apache Shiro before 1.4.2, when using the default "remember me" config ... |
| CVE-2016-6802 | vulnerable (no DSA) | fixed | fixed | fixed | fixed | Apache Shiro before 1.3.2 allows attackers to bypass intended servlet ... |
| CVE-2016-4437 | vulnerable (no DSA) | fixed | fixed | fixed | fixed | Apache Shiro before 1.2.5, when a cipher key has not been configured f ... |