diff --git a/advisories/unreviewed/2026/08/GHSA-r2fv-9rvj-c54c/GHSA-r2fv-9rvj-c54c.json b/advisories/unreviewed/2026/08/GHSA-r2fv-9rvj-c54c/GHSA-r2fv-9rvj-c54c.json index 7baf76efba14..d1fa0058aa64 100644 --- a/advisories/unreviewed/2026/08/GHSA-r2fv-9rvj-c54c/GHSA-r2fv-9rvj-c54c.json +++ b/advisories/unreviewed/2026/08/GHSA-r2fv-9rvj-c54c/GHSA-r2fv-9rvj-c54c.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-r2fv-9rvj-c54c", - "modified": "2026-09-01T18:30:33Z", + "modified": "2026-09-02T07:20:51Z", "published": "2026-08-31T09:30:29Z", "aliases": [ "CVE-2026-58301" @@ -17,7 +17,27 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:U/V:D/RE:L/U:Amber" } ], - "affected": [], + "affected": [ + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.shiro:shiro-jakarta-ee" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2.0.0" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "<= 3.0.0" + } + } + ], "references": [ { "type": "ADVISORY", @@ -30,6 +50,10 @@ { "type": "WEB", "url": "http://www.openwall.com/lists/oss-security/2026/08/30/2" + }, + { + "type": "PACKAGE", + "url": "https://github.com/apache/shiro" } ], "database_specific": {