pypi package report

Is org.apache.shiro:shiro-core safe?

1 known vulnerability, worst severity CRITICAL.

cvss

9.8

how bad it is if exploited, out of 10

epss

2.7%

chance of exploitation in the next 30 days

xyz score

4.0

CyberXYZ composite, out of 10

fig. 01 — GHSA-45x9-q6vj-cqgq, the advisory selected below

// advisories

GHSA-45x9-q6vj-cqgq

CRITICALCVE-2022-40664

Apache Shiro before 1.10.0, Authentication Bypass Vulnerability in Shiro when forwarding or including via RequestDispatcher.

// dependencies

0 direct

// ai model usage

No published models are known to use this package.

Checked 2026-09-22 at 03:34 UTC. The most recent advisory here was published 2022-10-12. Updated continuously from NVD, GHSA, OSV and CNA feeds.

Is org.apache.shiro:shiro-core safe? pypi package security report | CyberXYZ