Current issue state, recent activity, and per-issue timelines from the indexed issue data.
| Date | Opened | Closed | Comments | Events | Open Backlog |
|---|---|---|---|---|---|
| 2026-09-20 | 0 | 0 | 0 | 0 | 0 |
| 2026-09-19 | 0 | 0 | 0 | 0 | 0 |
| 2026-09-18 | 0 | 0 | 0 | 0 | 0 |
| 2026-09-17 | 0 | 0 | 0 | 0 | 0 |
| 2026-09-16 | 0 | 0 | 0 | 0 | 0 |
| 2026-09-15 | 0 | 0 | 0 | 0 | 5 |
| 2026-09-14 | 0 | 0 | 0 | 0 | 0 |
| 2026-09-13 | 0 | 0 | 0 | 0 | 0 |
| 2026-09-12 | 0 | 0 | 0 | 0 | 0 |
| 2026-09-11 | 0 | 0 | 0 | 0 | 0 |
| 2026-09-10 | 0 | 0 | 0 | 0 | 0 |
| 2026-09-09 | 0 | 0 | 0 | 0 | 0 |
| 2026-09-08 | 0 | 0 | 0 | 0 | 0 |
| 2026-09-07 | 0 | 0 | 0 | 0 | 0 |
Opened: 0
Closed: 0
Comments: 0
Events: 0
| Issue | Author | State | Labels | Comments | Reactions | Updated |
|---|---|---|---|---|---|---|
#1576 [Enhancement] Improve Shiro's Spring Support Opened 2 years ago | bdemers | open - reopened | java spring valid | 9 | 3 | 6 days ago |
#2870 [Bug] Inconsistency between class-level and instance-level annotation processing Opened 30 days ago | lprimak | closed - completed | No labels | 0 | 0 | 29 days ago |
#2868 [Bug] Jakarta Rest Security context methods not working correctly Opened 30 days ago | lprimak | closed - completed | No labels | 0 | 0 | 30 days ago |
#1959 [Enhancement] Upgrade to Commons-BeanUtils 2.0.0-M1? Opened 2 years ago | lprimak | open | dependencies valid | 6 | 0 | 1 month ago |
#2841 [Bug] ActiveDirectoryRealm escapes full DN usernames in Shiro 2.2.1 causing LDAP authentication failures Opened 2 months ago | wanguttiz | closed - completed | help-wanted | 7 | 0 | 1 month ago |
#2818 [Bug] AllowAllCredentialsMatcher logs a "matched the simulated credentials" error via simulateFailedLogin Opened 3 months ago | phil198 | closed - completed | java core valid | 1 | 0 | 1 month ago |
#2837 Hardening: getPathWithinApplication() returns null for un-normalizable paths, bypassing the Shiro filter chain Opened 2 months ago | xaccefy | closed - completed | No labels | 11 | 0 | 1 month ago |
#2831 Add optional JEP-290 ObjectInputFilter support to DefaultSerializer, with a conservative default on RememberMe deserialization Opened 2 months ago | Nexory | closed - completed | No labels | 0 | 0 | 2 months ago |
#2827 [Bug] Breaking changes in SimpleSession in 3.0.0 Opened 3 months ago | kroepke | closed - completed | No labels | 2 | 0 | 2 months ago |
#2804 [Bug] DefaultSecurityManger.login(null, token) fails in 2.2.1 Opened 3 months ago | mnd999 | closed - completed | reproducible workaround | 1 | 0 | 2 months ago |
#2819 [Bug] shiro 3.0.0 blocks WEB-INF/resources Opened 3 months ago | lee-peter24 | closed - not_planned | No labels | 2 | 0 | 3 months ago |
#2805 [Enhancement] Clean Jenkins PR build workspace Opened 3 months ago | apupier | closed - completed | No labels | 3 | 0 | 3 months ago |
#2799 [Enhancement] Multi-realm system failures are not logged but swallowed Opened 3 months ago | lprimak | closed - completed | No labels | 0 | 0 | 3 months ago |
#1584 [Enhancement] Create 2.x maint branch and move main to 3.x Opened 2 years ago | lprimak | closed - completed | valid | 0 | 0 | 3 months ago |
#2762 [Bug] JSR-250 annotations are disabled by default Opened 3 months ago | lprimak | closed - not_planned | No labels | 1 | 0 | 3 months ago |
#2771 [Enhancement] Create a PR for merging 3.x into main Opened 3 months ago | lprimak | closed - duplicate | 3.x | 1 | 0 | 3 months ago |
#2758 [Hardening] Deprecate RandomSessionIdGenerator due to insufficient entropy (64-bit) Opened 4 months ago | Allen-wick | closed - completed | good-first-issue help-wanted web | 2 | 0 | 3 months ago |
#2714 [Doc] Restore structured release notes — separate behavioral changes from dependency updates Opened 4 months ago | sepe81 | closed - completed | help-wanted documentation | 1 | 0 | 3 months ago |
#2760 `shiro.doap.rdf`: should we list more later versions of Shiro Opened 3 months ago | jbampton | closed - completed | No labels | 1 | 0 | 3 months ago |
#2746 [Question] Issues with .asf.yaml Opened 4 months ago | lprimak | closed - completed | question | 9 | 0 | 3 months ago |
#2757 [Enhancement] Add safe redirect utilities with domain whitelisting to WebUtils / RedirectView Opened 4 months ago | Allen-wick | closed - completed | help-wanted web | 4 | 0 | 3 months ago |
#2763 [Doc] Clarify that disabling principal parameter also disables JSR-250 annotations Opened 3 months ago | Allen-wick | closed - not_planned | documentation | 1 | 0 | 3 months ago |
#2713 [Bug] Unexpected session expiration behavior on ARM64 architecture (Concurrency Issue) Opened 4 months ago | lprimak | closed - completed | No labels | 2 | 0 | 3 months ago |
#2761 [Enhancement] Deprecate Spring Remoting integration (SecureRemoteInvocationExecutor) due to upstream Java deserialization risks Opened 3 months ago | Allen-wick | closed - not_planned | No labels | 1 | 0 | 3 months ago |
#2719 [Question] Any ETA for Apache Shiro 3.0.0 GA Release? Opened 4 months ago | fit2-zhao | closed - completed | question | 0 | 0 | 4 months ago |
