UnratedFix available
Apache Shiro 3.0.1
Apache Shiro 3.0.1 adds replay checks and optional JEP-290 ObjectInputFilter support with a conservative resource-limit default for RememberMe deserialization.
Announced Group revision 1
Original source ↗github-apache-shiro
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
Apache Shiro 3.0.1 Security updates enh: added replay whitelist and blacklist check before resubmitting a… by @lprimak in #2826 [#2831] - Add optional JEP-290 ObjectInputFilter support to DefaultSerializer, with a conservative resource-limit default on RememberMe deserialization
Apache Shiro
Apache Shiro 3.0.1
- Affected versions
- Not stated in this extraction
- Fixed versions
- 3.0.1
Apache Shiro 3.0.1
- Prerequisites
- Not stated in this extraction
Publisher severity
No explicit severity was extracted.
- Event
- #77340 · Revision 1
- Added to Heist Feed
- Publisher date