Mark Denihan created SHIRO-723:
----------------------------------
Summary: Provide Minor Shiro Release that includes CVE-2019-10086
Fiix
Key: SHIRO-723
URL: https://issues.apache.org/jira/browse/SHIRO-723
Project: Shiro
Issue Type: Request
Affects Versions: 1.4.1
Reporter: Mark Denihan
As a User of Shiro
I want Shiro to pass security scans
So that it doesn't break my pipeline
The latest version of Shrio includes the risk from CVE-2019-10086. This has
been fixed in SHIRO-720 and is in master. However there is no release available
that includes the August Merge Request.
ref:
[https://github.com/apache/shiro/pull/167]
https://issues.apache.org/jira/browse/SHIRO-720
[https://nvd.nist.gov/vuln/detail/CVE-2019-10086]
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
