Simple. Java. Security. 2026-05-27T00:04:14Z Les Hazlewood https://twitter.com/@lhazlewood Benjamin Marwell https://twitter.com/@bmarwell Lenny Primak https://twitter.com/@lprimak François Papon https://twitter.com/@fpapon2 Richard Zowalla https://twitter.com/@zowalla Brian Demers https://twitter.com/@briandemers https://shiro.apache.org/ JBake.org /images/favicon128.png /images/apache-shiro-logo.png https://shiro.apache.org/blog/2026/05/apache-shiro-220-released.html 2026-05-26T00:00:00Z Francois Papon <div id="preamble"> <div class="sectionbody"> <div class="paragraph"> <p>The Apache Shiro team is pleased to announce the release of Apache Shiro version 2.2.0.</p> </div> <div class="paragraph"> <p>This release is available for download now.</p> </div> </div> </div> <div class="sect1"> <h2 id="release_highlights">Release Highlights</h2> <div class="sectionbody"> <div class="paragraph"> <p>This is a maintenance release that includes several bug fixes, improvements and dependency updates. It is recommended for all users to upgrade to this version.</p> </div> <div class="paragraph"> <p>We have new contributors!</p> </div> <div class="ulist"> <ul> <li> <p><a href="https://github.com/iampratap7997-dot">@iampratap7997-dot</a></p> </li> </ul> </div> </div> </div> <div class="sect1"> <h2 id="all_changes">All changes</h2> <div class="sectionbody"> <div class="paragraph"> <p>You can learn more on <a href="https://github.com/apache/shiro/releases/tag/shiro-root-2.2.0">GitHub, Release 2.2.0</a>.</p> </div> </div> </div> <div class="sect1"> <h2 id="download">Download</h2> <div class="sectionbody"> <div class="paragraph"> <p>Download and verification instructions are available <a href="/download.html">on our download page</a>.</p> </div> </div> </div> <div class="sect1"> <h2 id="documentation">Documentation</h2> <div class="sectionbody"> <div class="paragraph"> <p>For more information on <a href="/documentation.html">Shiro, please read the documentation.</a></p> </div> <div class="paragraph"> <p>Enjoy!</p> </div> <div class="paragraph"> <p>The Apache Shiro Team</p> </div> </div> </div> https://shiro.apache.org/blog/2026/04/community-effort.html 2026-04-29T00:00:00Z Lenny Primak <div id="preamble"> <div class="sectionbody"> <div class="paragraph"> <p>Apache Shiro has entered a new chapter, one filled with opportunity.</p> </div> <div class="paragraph"> <p>For years, Shiro has quietly powered authentication, authorization, cryptography, and session management for countless applications around the world. Its simplicity and flexibility made it a favorite among developers who needed security without unnecessary complexity.</p> </div> <div class="paragraph"> <p>Today, with the conclusion of past corporate sponsorships of Shiro&#8217;s individual contributors, the project is maintained entirely by dedicated volunteers who believe in its mission and its value to the ecosystem.</p> </div> <div class="paragraph"> <p>Open source has always thrived because of community support. Some of the most resilient and innovative projects exist because individuals and organizations stepped up when it mattered most. Shiro is now at that moment.</p> </div> </div> </div> <div class="sect1"> <h2 id="why_this_matters">Why This Matters</h2> <div class="sectionbody"> <div class="ulist"> <ul> <li> <p>Shiro remains a critical dependency for many production systems</p> </li> <li> <p>Its lightweight, framework-agnostic design fills a unique niche</p> </li> <li> <p>Continued maintenance ensures security, stability, and trust</p> </li> </ul> </div> </div> </div> <div class="sect1"> <h2 id="whats_needed_now">What’s Needed Now</h2> <div class="sectionbody"> <div class="ulist"> <ul> <li> <p>Contributors to help with development, testing, and documentation</p> </li> <li> <p>Organizations willing to <a href="/commercial-support.html">financially sponsor</a> ongoing work via commercial support</p> </li> <li> <p>Advocates who believe in sustainable open source</p> </li> </ul> </div> <div class="paragraph"> <p>If you rely on Shiro, even indirectly, this is the time to invest in its future. Financial involvement isn’t just support; it’s a way to ensure the tools you depend on remain secure, modern, and well-maintained.</p> </div> <div class="paragraph"> <p>And if you’re an engineer looking to make an impact, this is a rare chance to shape the direction of a widely used security framework.</p> </div> <div class="paragraph"> <p>Open source doesn’t disappear when funding changes, it evolves based on who shows up next.</p> </div> <div class="paragraph"> <p>Let’s make sure Shiro continues to be a project worth relying on.</p> </div> </div> </div> <div class="sect1"> <h2 id="what_you_can_do_right_now">What you can do right now</h2> <div class="sectionbody"> <div class="ulist"> <ul> <li> <p>Consider <a href="/commercial-support.html">commercial support</a> for the project to ensure its sustainability</p> </li> <li> <p>Contribute code, tests, or documentation</p> </li> <li> <p>Spread the word</p> </li> </ul> </div> </div> </div> <div class="sect1"> <h2 id="tags">Tags</h2> <div class="sectionbody"> <div class="paragraph"> <p>#OpenSource #ApacheShiro #Security #SoftwareDevelopment #OSS #Community</p> </div> </div> </div> https://shiro.apache.org/blog/2026/02/apache-shiro-3-alpha-1-released.html 2026-02-27T00:00:00Z Lenny Primak <div id="preamble"> <div class="sectionbody"> <div class="paragraph"> <p>The Apache Shiro team is pleased to announce the release of Apache Shiro version 3.0.0-alpha-1.</p> </div> <div class="paragraph"> <p>This release is available for download now.</p> </div> </div> </div> <div class="sect1"> <h2 id="release_highlights">Release Highlights</h2> <div class="sectionbody"> <div class="ulist"> <ul> <li> <p>Java 17 is the minimum requirement</p> </li> <li> <p>Using Scoped values instead of ThreadLocals on JDK 25+</p> </li> <li> <p>Jakarta EE 11, Spring 7 and SpringBoot 4 without classifiers, dropped support for Jakarta EE 8, SpringBoot 2 and javax namespace</p> </li> <li> <p>Removed many deprecations</p> </li> <li> <p>Refactored code to use Java 17+ features</p> </li> </ul> </div> <div class="paragraph"> <p>The reason this is still an Alpha release is because we are still unsure of further API stability, but the release is in a good enough state to try out with your current projects.</p> </div> <div class="paragraph"> <p>We have new contributors!</p> </div> <div class="ulist"> <ul> <li> <p><a href="https://github.com/janitza-mage">@janitza-mage</a></p> </li> <li> <p><a href="https://github.com/Himakar">@Himakar</a></p> </li> <li> <p><a href="https://github.com/rgcv">@rgcv</a></p> </li> <li> <p><a href="https://github.com/nsoft">@nsoft</a></p> </li> <li> <p><a href="https://github.com/iampratap7997-dot">@iampratap7997-dot</a></p> </li> </ul> </div> </div> </div> <div class="sect1"> <h2 id="all_changes">All changes</h2> <div class="sectionbody"> <div class="paragraph"> <p>You can learn more on <a href="https://github.com/apache/shiro/releases/tag/shiro-root-3.0.0-alpha-1">GitHub, Release 3.0.0-alpha-1</a>.</p> </div> </div> </div> <div class="sect1"> <h2 id="download">Download</h2> <div class="sectionbody"> <div class="paragraph"> <p>Download and verification instructions are available <a href="/download.html">on our download page</a>.</p> </div> </div> </div> <div class="sect1"> <h2 id="documentation">Documentation</h2> <div class="sectionbody"> <div class="paragraph"> <p>For more information on <a href="/documentation.html">Shiro, please read the documentation.</a></p> </div> <div class="paragraph"> <p>Enjoy!</p> </div> <div class="paragraph"> <p>The Apache Shiro Team</p> </div> </div> </div> https://shiro.apache.org/blog/2026/02/apache-shiro-210-released.html 2026-02-08T00:00:00Z Francois Papon <div id="preamble"> <div class="sectionbody"> <div class="paragraph"> <p>The Apache Shiro team is pleased to announce the release of Apache Shiro version 2.1.0.</p> </div> <div class="paragraph"> <p>This release is available for download now.</p> </div> </div> </div> <div class="sect1"> <h2 id="release_highlights">Release Highlights</h2> <div class="sectionbody"> <div class="paragraph"> <p>This is a maintenance release that includes several bug fixes, improvements and dependency updates. It is recommended for all users to upgrade to this version.</p> </div> <div class="paragraph"> <p>We have new contributors!</p> </div> <div class="ulist"> <ul> <li> <p><a href="https://github.com/celikfatih">@celikfatih</a></p> </li> <li> <p><a href="https://github.com/haster">@haster</a></p> </li> </ul> </div> </div> </div> <div class="sect1"> <h2 id="all_changes">All changes</h2> <div class="sectionbody"> <div class="paragraph"> <p>You can learn more on <a href="https://github.com/apache/shiro/releases/tag/shiro-root-2.1.0">GitHub, Release 2.1.0</a>.</p> </div> </div> </div> <div class="sect1"> <h2 id="download">Download</h2> <div class="sectionbody"> <div class="paragraph"> <p>Download and verification instructions are available <a href="/download.html">on our download page</a>.</p> </div> </div> </div> <div class="sect1"> <h2 id="documentation">Documentation</h2> <div class="sectionbody"> <div class="paragraph"> <p>For more information on <a href="/documentation.html">Shiro, please read the documentation.</a></p> </div> <div class="paragraph"> <p>Enjoy!</p> </div> <div class="paragraph"> <p>The Apache Shiro Team</p> </div> </div> </div> https://shiro.apache.org/blog/2025/11/apache-shiro-206-released.html 2025-11-07T00:00:00Z Francois Papon <div id="preamble"> <div class="sectionbody"> <div class="paragraph"> <p>The Apache Shiro team is pleased to announce the release of Apache Shiro version 2.0.6.</p> </div> <div class="paragraph"> <p>This release is available for download now.</p> </div> </div> </div> <div class="sect1"> <h2 id="release_highlights">Release Highlights</h2> <div class="sectionbody"> <div class="paragraph"> <p>This is a maintenance release that includes several bug fixes, improvements and dependency updates. It is recommended for all users to upgrade to this version.</p> </div> <div class="paragraph"> <p>We have new contributors!</p> </div> <div class="ulist"> <ul> <li> <p><a href="https://github.com/OyvindLGjesdal">@OyvindLGjesdal</a></p> </li> <li> <p><a href="https://github.com/ntolppi">@ntolppi</a></p> </li> </ul> </div> </div> </div> <div class="sect1"> <h2 id="all_changes">All changes</h2> <div class="sectionbody"> <div class="paragraph"> <p>You can learn more on <a href="https://github.com/apache/shiro/releases/tag/shiro-root-2.0.6">GitHub, Release 2.0.6</a>.</p> </div> </div> </div> <div class="sect1"> <h2 id="download">Download</h2> <div class="sectionbody"> <div class="paragraph"> <p>Download and verification instructions are available <a href="/download.html">on our download page</a>.</p> </div> </div> </div> <div class="sect1"> <h2 id="documentation">Documentation</h2> <div class="sectionbody"> <div class="paragraph"> <p>For more information on <a href="/documentation.html">Shiro, please read the documentation.</a></p> </div> <div class="paragraph"> <p>Enjoy!</p> </div> <div class="paragraph"> <p>The Apache Shiro Team</p> </div> </div> </div> https://shiro.apache.org/blog/2025/07/apache-shiro-205-released.html 2025-07-07T00:00:00Z Lenny Primak <div id="preamble"> <div class="sectionbody"> <div class="paragraph"> <p>The Apache Shiro team is pleased to announce the release of Apache Shiro version 2.0.5.</p> </div> <div class="paragraph"> <p>This release is available for download now.</p> </div> </div> </div> <div class="sect1"> <h2 id="release_highlights">Release Highlights</h2> <div class="sectionbody"> <div class="paragraph"> <p>This is a maintenance release that includes several bug fixes, improvements and dependency updates. It is recommended for all users to upgrade to this version.</p> </div> <div class="ulist"> <ul> <li> <p>Fixes several issues with Spring Boot integration, including Actuator compatibility. See <a href="https://github.com/apache/shiro/issues/1879">#1879</a> and <a href="https://github.com/apache/shiro/issues/1691">#1691</a> for details.</p> </li> </ul> </div> </div> </div> <div class="sect1"> <h2 id="all_changes">All changes</h2> <div class="sectionbody"> <div class="paragraph"> <p>You can learn more on <a href="https://github.com/apache/shiro/releases/tag/shiro-root-2.0.5">GitHub, Release 2.0.5</a>.</p> </div> </div> </div> <div class="sect1"> <h2 id="download">Download</h2> <div class="sectionbody"> <div class="paragraph"> <p>Download and verification instructions are available <a href="/download.html">on our download page</a>.</p> </div> </div> </div> <div class="sect1"> <h2 id="documentation">Documentation</h2> <div class="sectionbody"> <div class="paragraph"> <p>For more information on <a href="/documentation.html">Shiro, please read the documentation.</a></p> </div> <div class="paragraph"> <p>Enjoy!</p> </div> <div class="paragraph"> <p>The Apache Shiro Team</p> </div> </div> </div> https://shiro.apache.org/blog/2025/04/apache-shiro-204-released.html 2025-04-20T00:00:00Z Lenny Primak <div id="preamble"> <div class="sectionbody"> <div class="paragraph"> <p>The Apache Shiro team is pleased to announce the release of Apache Shiro version 2.0.4.</p> </div> <div class="paragraph"> <p>This release is available for download now.</p> </div> </div> </div> <div class="sect1"> <h2 id="release_highlights">Release Highlights</h2> <div class="sectionbody"> <div class="paragraph"> <p>This is a maintenance release that includes several bug fixes, improvements and dependency updates. It is recommended for all users to upgrade to this version.</p> </div> <div class="ulist"> <ul> <li> <p>Fixes a possible ThreadLocal variable leak when Servlet starts threads</p> </li> <li> <p>Fixes issues with Remember Me functionality in Apache Karaf and OSGi environments</p> </li> </ul> </div> </div> </div> <div class="sect1"> <h2 id="all_changes">All changes</h2> <div class="sectionbody"> <div class="paragraph"> <p>You can learn more on <a href="https://github.com/apache/shiro/releases/tag/shiro-root-2.0.4">GitHub, Release 2.0.4</a>.</p> </div> </div> </div> <div class="sect1"> <h2 id="download">Download</h2> <div class="sectionbody"> <div class="paragraph"> <p>Download and verification instructions are available <a href="/download.html">on our download page</a>.</p> </div> </div> </div> <div class="sect1"> <h2 id="documentation">Documentation</h2> <div class="sectionbody"> <div class="paragraph"> <p>For more information on <a href="/documentation.html">Shiro, please read the documentation.</a></p> </div> <div class="paragraph"> <p>Enjoy!</p> </div> <div class="paragraph"> <p>The Apache Shiro Team</p> </div> </div> </div> https://shiro.apache.org/blog/2025/04/apache-shiro-203-released.html 2025-04-06T00:00:00Z Lenny Primak <div id="preamble"> <div class="sectionbody"> <div class="paragraph"> <p>The Apache Shiro team is pleased to announce the release of Apache Shiro version 2.0.3.</p> </div> <div class="paragraph"> <p>This release is available for download now.</p> </div> </div> </div> <div class="sect1"> <h2 id="release_highlights">Release Highlights</h2> <div class="sectionbody"> <div class="paragraph"> <p>This is a maintenance release that includes several bug fixes and improvements, and many dependency updates. It is recommended for all users to upgrade to this version.</p> </div> <div class="ulist"> <ul> <li> <p>Clean up invalid Javadoc syntax and broken references</p> </li> <li> <p>Clean up comments and make log messages in AuthenticatingRealm consistent</p> </li> <li> <p>Catch IllegalStateException in validate() and do not log incorrect error messages</p> </li> </ul> </div> </div> </div> <div class="sect1"> <h2 id="all_changes">All changes</h2> <div class="sectionbody"> <div class="paragraph"> <p>You can learn more on <a href="https://github.com/apache/shiro/releases/tag/shiro-root-2.0.3">GitHub, Release 2.0.3</a>.</p> </div> </div> </div> <div class="sect1"> <h2 id="download">Download</h2> <div class="sectionbody"> <div class="paragraph"> <p>Download and verification instructions are available <a href="/download.html">on our download page</a>.</p> </div> </div> </div> <div class="sect1"> <h2 id="documentation">Documentation</h2> <div class="sectionbody"> <div class="paragraph"> <p>For more information on <a href="/documentation.html">Shiro, please read the documentation.</a></p> </div> <div class="paragraph"> <p>Enjoy!</p> </div> <div class="paragraph"> <p>The Apache Shiro Team</p> </div> </div> </div> https://shiro.apache.org/blog/2024/11/apache-shiro-202-released.html 2024-11-13T00:00:00Z Lenny Primak <div id="preamble"> <div class="sectionbody"> <div class="paragraph"> <p>The Apache Shiro team is pleased to announce the release of Apache Shiro version 2.0.2.</p> </div> <div class="paragraph"> <p>This release is available for download now.</p> </div> </div> </div> <div class="sect1"> <h2 id="release_highlights">Release Highlights</h2> <div class="sectionbody"> <div class="paragraph"> <p>This is a maintenance release that includes several bug fixes and improvements, and many dependency updates. It is recommended for all users to upgrade to this version.</p> </div> <div class="ulist"> <ul> <li> <p>Fix creating subjects from a SubjectFactory that disables session-creation</p> </li> <li> <p>Follow desired request scheme when doing redirection</p> </li> </ul> </div> </div> </div> <div class="sect1"> <h2 id="all_changes">All changes</h2> <div class="sectionbody"> <div class="paragraph"> <p>You can learn more on <a href="https://github.com/apache/shiro/releases/tag/shiro-root-2.0.2">GitHub, Release 2.0.2</a>.</p> </div> </div> </div> <div class="sect1"> <h2 id="download">Download</h2> <div class="sectionbody"> <div class="paragraph"> <p>Download and verification instructions are available <a href="/download.html">on our download page</a>.</p> </div> </div> </div> <div class="sect1"> <h2 id="documentation">Documentation</h2> <div class="sectionbody"> <div class="paragraph"> <p>For more information on <a href="/documentation.html">Shiro, please read the documentation.</a></p> </div> <div class="paragraph"> <p>Enjoy!</p> </div> <div class="paragraph"> <p>The Apache Shiro Team</p> </div> </div> </div> https://shiro.apache.org/blog/2024/05/apache-shiro-201-released.html 2024-05-30T00:00:00Z Lenny Primak <div id="preamble"> <div class="sectionbody"> <div class="paragraph"> <p>The Apache Shiro team is pleased to announce the release of Apache Shiro version 2.0.1.</p> </div> <div class="paragraph"> <p>This release is available for download now.</p> </div> </div> </div> <div class="sect1"> <h2 id="release_highlights">Release Highlights</h2> <div class="sectionbody"> <div class="ulist"> <ul> <li> <p>Added a supported way to decorate Shiro SecurityManager</p> </li> <li> <p>Better compatibility with OSGi for Jakarta EE jakarta namespace</p> </li> <li> <p>Fixed exception handling bugs in Jax-Rs integration module</p> </li> <li> <p>Fixed a bug in Jakarta Faces integration</p> </li> <li> <p>Better compatibility when building with Maven 4.x</p> </li> </ul> </div> </div> </div> <div class="sect1"> <h2 id="all_changes">All changes</h2> <div class="sectionbody"> <div class="paragraph"> <p>You can learn more on <a href="https://github.com/apache/shiro/releases/tag/shiro-root-2.0.1">GitHub, Release 2.0.1</a>.</p> </div> </div> </div> <div class="sect1"> <h2 id="download">Download</h2> <div class="sectionbody"> <div class="paragraph"> <p>Download and verification instructions are available <a href="/download.html">on our download page</a>.</p> </div> </div> </div> <div class="sect1"> <h2 id="documentation">Documentation</h2> <div class="sectionbody"> <div class="paragraph"> <p>For more information on <a href="/documentation.html">Shiro, please read the documentation.</a></p> </div> <div class="paragraph"> <p>Enjoy!</p> </div> <div class="paragraph"> <p>The Apache Shiro Team</p> </div> </div> </div> https://shiro.apache.org/blog/2024/02/apache-shiro-200-released.html 2024-02-28T00:00:00Z Lenny Primak <div id="preamble"> <div class="sectionbody"> <div class="paragraph"> <p>The Apache Shiro team is pleased to announce the release of Apache Shiro version 2.0.0. This is the first major release for Shiro 2.x</p> </div> <div class="paragraph"> <p>This release is available for download now.</p> </div> </div> </div> <div class="sect1"> <h2 id="release_highlights">Release Highlights</h2> <div class="sectionbody"> <div class="ulist"> <ul> <li> <p>Java 11 is the minimum supported JVM version</p> </li> <li> <p>Stronger default password hashing algorithms (Argon2 and BCrypt)</p> </li> <li> <p>Jakarta EE 10 support (Java/Jakarta EE 8 is also supported)</p> </li> <li> <p>New Jakarta EE integration module (see <a href="https://shiro.apache.org/jakarta-ee.html">Jakarta EE Integration</a> for more information)</p> </li> <li> <p>SpringBoot 3.x support (SpringBoot 2.x is also supported)</p> </li> <li> <p>Automatic form resubmission when session expired (Jakarta EE only)</p> </li> </ul> </div> </div> </div> <div class="sect1"> <h2 id="all_changes">All changes</h2> <div class="sectionbody"> <div class="paragraph"> <p>You can learn more on <a href="https://github.com/apache/shiro/releases/tag/shiro-root-2.0.0">GitHub, Release 2.0.0</a>.</p> </div> </div> </div> <div class="sect1"> <h2 id="download">Download</h2> <div class="sectionbody"> <div class="paragraph"> <p>Download and verification instructions are available <a href="/download.html">on our download page</a>.</p> </div> </div> </div> <div class="sect1"> <h2 id="documentation">Documentation</h2> <div class="sectionbody"> <div class="paragraph"> <p>For more information on <a href="/documentation.html">Shiro, please read the documentation.</a></p> </div> <div class="paragraph"> <p>Enjoy!</p> </div> <div class="paragraph"> <p>The Apache Shiro Team</p> </div> </div> </div> https://shiro.apache.org/blog/2023/11/10/apache-shiro-1130-released.html 2023-11-10T00:00:00Z Francois Papon <div id="preamble"> <div class="sectionbody"> <div class="paragraph"> <p>The Apache Shiro team is pleased to announce the release of Apache Shiro version 1.13.0. This is a feature release for 1.x.</p> </div> <div class="paragraph"> <p>This release solves 2 issues since the 1.13.0 release and is available for download now.</p> </div> </div> </div> <div class="sect1"> <h2 id="all_changes">All changes</h2> <div class="sectionbody"> <div class="paragraph"> <p>You can learn more on <a href="https://github.com/apache/shiro/releases/tag/shiro-root-1.13.0">GitHub, Release 1.13.0</a>.</p> </div> <div class="sect2"> <h3 id="cve_2023_46750"><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46750">CVE-2023-46750</a></h3> <div class="paragraph"> <p>URL Redirection to Untrusted Site ('Open Redirect') vulnerability when "form" authentication is used in Apache Shiro.</p> </div> <div class="paragraph"> <p><strong>Mitigation:</strong> Update to Apache Shiro 1.13.0+ or 2.0.0-alpha-4+.</p> </div> </div> </div> </div> <div class="sect1"> <h2 id="download">Download</h2> <div class="sectionbody"> <div class="paragraph"> <p>Download and verification instructions are available <a href="/download.html">on our download page</a>.</p> </div> </div> </div> <div class="sect1"> <h2 id="documentation">Documentation</h2> <div class="sectionbody"> <div class="paragraph"> <p>For more information on <a href="/documentation.html">Shiro, please read the documentation.</a></p> </div> <div class="paragraph"> <p>Enjoy!</p> </div> <div class="paragraph"> <p>The Apache Shiro Team</p> </div> </div> </div>