Simple. Java. Security.
Apache Shiro Community Support
|
Handy Hint
|
Shiro v1 and v2 version end-of-life notice
As of February 28, 2024, Shiro v1 was superseded by v2.
As of June 29, 2026, Shiro v2 was superseded by v3.
|
The Shiro project offers support through its community of users, contributors, and project committers.
We encourage everyone to participate and use the available community support tools below.
Scope of support
Community support is provided on a best-effort basis by volunteers through the mailing lists and GitHub Discussions. Commercial support is offered by third parties such as Flow Logix and Yupiik, see Commercial Support. Defects are tracked in GitHub Issues, and security vulnerabilities are reported privately as described on the Security Reports page.
Supported versions
| Release line | Support |
|---|---|
3.x |
Supported. Receives security fixes. |
2.x |
Receives only critical security fixes. |
1.x |
End of life. No further releases or security fixes. |
Please use the most recent release of a supported line. Fixes for older release lines that are out of scope for the open source project are available through commercial support. When a release line stops receiving security fixes, the end of support is announced on the mailing lists and on the download page, and this table is updated. Older releases remain available in the release archive.
Sponsorship
Sponsorship can be used simply as a way to say thank you for the work that has been done or as a way to encourage specific issues to be worked on. In either case, while the Apache Shiro project thanks you for your support, we cannot be responsible for any promises and/or contributions made by an individual committer, as individual commits must be reviewed and accepted by the project team.
