StackRadarChart IndexLive demo

CVE-2026-23901

Low

Advisory

Published 10 Feb 2026In the index since 6 Sept 2026

Severity: Low; worst across findings
CVSS: 1.0; base score, highest
EPSS: 0.002; 13th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 29; of 17,781 indexed, latest versions
Container images: 24; deployed by those charts
Fix available: 1 of 1; affected package

Apache Shiro Affected by an Observable Timing Discrepancy Vulnerability

Carried by container images the latest versions of 29 of 17,781 indexed charts deploy, on 24 images.

Affected package	Affected versions	Fixed in	Images
shiro-coremaven	1.2.3, 1.2.6, 1.4.0, 1.6.0+10 more	2.1.0	24

OSV records: GHSA-c4qc-4q9p-m9q9

Charts affected

29 by stars

Chart

Latest

Affected images

Radar Score

neo4jneo4j-helm

1 of 1 See more

neo4j neo4j-helm 4.3.2-1

1 of the 1 container images this version deploys carry CVE-2026-23901.

Container image	Digest	Package	Fixed in
library/neo4j :4.3.2-enterprise	56a9453c4064	shiro-core@1.7.1	2.1.0

Open the chart page →

2,640

thehivestrangebee-helm

1 of 7 See more

thehive strangebee-helm 1.0.6

1 of the 7 container images this version deploys carry CVE-2026-23901.

Container image	Digest	Package	Fixed in
strangebee/thehive :5.7.6-1	e77b713124dd	shiro-core@1.13.0	2.1.0

Open the chart page →

16,210

scm-managerscm-manager

1 of 1 See more

scm-manager scm-manager 3.12.1

1 of the 1 container images this version deploys carry CVE-2026-23901.

Container image	Digest	Package	Fixed in
scmmanager/scm-manager :3.12.1	bfb766050f34	shiro-core@1.13.0	2.1.0

Open the chart page →

649

neo4j-communityequinor-charts

1 of 1 See more

neo4j-community equinor-charts 1.2.5

1 of the 1 container images this version deploys carry CVE-2026-23901.

Container image	Digest	Package	Fixed in
library/neo4j :4.2.4	348e3f56faa2	shiro-core@1.7.1	2.1.0

Open the chart page →

2,751

omada-controllergeek-cookbook

1 of 1 See more

omada-controller geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-23901.

Container image	Digest	Package	Fixed in
mbentley/omada-controller :4.3	f4e682274bed	shiro-core@1.4.0	2.1.0

Open the chart page →

11,553

prowlerprowler-app

1 of 5 See more

prowler prowler-app 0.0.9

1 of the 5 container images this version deploys carry CVE-2026-23901.

Container image	Digest	Package	Fixed in
library/neo4j :2026.02.2	5ab4ab0358cf	shiro-core@2.0.6	2.1.0

Open the chart page →

8,158

1 of 3 See more

graylog t3n 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-23901.

Container image	Digest	Package	Fixed in
graylog2/server :2.4.3-3	8ff28c66e6c1	shiro-core@1.4.0	2.1.0

Open the chart page →

8,063

zunivers-ninjaalexpresso

1 of 2 See more

zunivers-ninja alexpresso 1.31.2

1 of the 2 container images this version deploys carry CVE-2026-23901.

Container image	Digest	Package	Fixed in
library/neo4j :5.18.1	8f01f7bb053e	shiro-core@1.13.0	2.1.0

Open the chart page →

1,165

omada-controllerandrelote-k8s

1 of 1 See more

omada-controller andrelote-k8s 4.5.0

1 of the 1 container images this version deploys carry CVE-2026-23901.

Container image	Digest	Package	Fixed in
mbentley/omada-controller :4.3	f4e682274bed	shiro-core@1.4.0	2.1.0

Open the chart page →

11,553

axelor-open-suiteaxelor-open-suite

1 of 2 See more

axelor-open-suite axelor-open-suite 7.2.58

1 of the 2 container images this version deploys carry CVE-2026-23901.

Container image	Digest	Package	Fixed in
pmoscode/axelor-open-suite :v7.2.57	a58f4d762f5c	shiro-core@1.9.1	2.1.0

Open the chart page →

9,722

cassandra-reapercloudnativeapp

1 of 1 See more

cassandra-reaper cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-23901.

Container image	Digest	Package	Fixed in
thelastpickle/cassandra-reaper :1.3.0	9c53996c457d	shiro-core@1.2.3	2.1.0

Open the chart page →

5,078

neo4jcloudnativeapp

1 of 1 See more

neo4j cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-23901.

Container image	Digest	Package	Fixed in
library/neo4j :3.4.5-enterprise	a1ba477fa412	shiro-core@1.4.0	2.1.0

Open the chart page →

2,837

shenyuerdeng

1 of 2 See more

shenyu erdeng 2.4.21

1 of the 2 container images this version deploys carry CVE-2026-23901.

Container image	Digest	Package	Fixed in
apache/shenyu-admin :2.4.2	e8b7c4ddd069	shiro-core@1.7.0	2.1.0

Open the chart page →

12,513

my-chartfleet-web-app

1 of 6 See more

my-chart fleet-web-app 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-23901.

Container image	Digest	Package	Fixed in
richardchesterwood/k8s-fleetman-queue :release2	f7f8d5951155	shiro-core@1.10.1	2.1.0

Open the chart page →

24,296

grayloggraylog

1 of 4 See more

graylog graylog 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-23901.

Container image	Digest	Package	Fixed in
graylog/graylog :6.1.10	19de1aff48c2	shiro-core@2.0.1	2.1.0

Open the chart page →

5,261

jenainseefrlab

1 of 1 See more

jena inseefrlab 3.1.0

1 of the 1 container images this version deploys carry CVE-2026-23901.

Container image	Digest	Package	Fixed in
stain/jena-fuseki :latest	b1d0c96f19ad	shiro-core@2.0.1	2.1.0

Open the chart page →

1,262

nexusjenkins-x

1 of 1 See more

nexus jenkins-x 0.1.37

1 of the 1 container images this version deploys carry CVE-2026-23901.

Container image	Digest	Package	Fixed in
ghcr.io/jenkins-x/nexus :0.1.37	8caf5289fe73	shiro-core@1.6.0	2.1.0

Open the chart page →

12,856

shinsei-managerjtekt

1 of 8 See more

shinsei-manager jtekt 0.2.0

1 of the 8 container images this version deploys carry CVE-2026-23901.

Container image	Digest	Package	Fixed in
library/neo4j :5.20.0	52d3dec8d455	shiro-core@2.0.0	2.1.0

Open the chart page →

63,461

ladeitladeit

1 of 2 See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-23901.

Container image	Digest	Package	Fixed in
ladeit/ladeit :latest	962b665ffe82	shiro-core@1.4.0	2.1.0

Open the chart page →

26,356

activemqmicroboxlabs

1 of 1 See more

activemq microboxlabs 3.8.0

1 of the 1 container images this version deploys carry CVE-2026-23901.

Container image	Digest	Package	Fixed in
alfresco/alfresco-activemq :5.18.7-jre17-rockylinux8	5472f88d9b0b	shiro-core@1.13.0	2.1.0

Open the chart page →

1,494

MINTmint

1 of 15 See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2026-23901.

Container image	Digest	Package	Fixed in
mintproject/model-catalog-endpoint :29256555a6fbaefae4729d5cd259564708a4ab04	ffbb13f20465	shiro-core@1.2.6	2.1.0

Open the chart page →

43,341

user-manager-neo4jmoreillon

1 of 6 See more

user-manager-neo4j moreillon 0.9.7

1 of the 6 container images this version deploys carry CVE-2026-23901.

Container image	Digest	Package	Fixed in
library/neo4j :5.20.0	52d3dec8d455	shiro-core@2.0.0	2.1.0

Open the chart page →

30,363

neo4jneo4j-helm-old

1 of 1 See more

neo4j neo4j-helm-old 4.3.2-1

1 of the 1 container images this version deploys carry CVE-2026-23901.

Container image	Digest	Package	Fixed in
library/neo4j :4.3.2-enterprise	56a9453c4064	shiro-core@1.7.1	2.1.0

Open the chart page →

2,640

onedevonedev

1 of 1 See more

onedev onedev 11.9.0

1 of the 1 container images this version deploys carry CVE-2026-23901.

Container image	Digest	Package	Fixed in
1dev/server :11.9.0	cd5b12fe5471	shiro-core@1.13.0	2.1.0

Open the chart page →

6,037

apache-knox-helmpfisterer-knox

1 of 1 See more

apache-knox-helm pfisterer-knox 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-23901.

Container image	Digest	Package	Fixed in
farberg/apache-knox-docker :1.6.1	4b4a22487394	shiro-core@1.7.0	2.1.0

Open the chart page →

6,237

shenyushenyu

1 of 2 See more

shenyu shenyu 0.6.3

1 of the 2 container images this version deploys carry CVE-2026-23901.

Container image	Digest	Package	Fixed in
apache/shenyu-admin :2.5.1	e2be712fc4f4	shiro-core@1.8.0	2.1.0

Open the chart page →

8,804

shenyushenyu-helm-chart-test

1 of 2 See more

shenyu shenyu-helm-chart-test 2.4.27

1 of the 2 container images this version deploys carry CVE-2026-23901.

Container image	Digest	Package	Fixed in
apache/shenyu-admin :2.4.2	e8b7c4ddd069	shiro-core@1.7.0	2.1.0

Open the chart page →

12,513

sonatype-nexus3simcube

1 of 2 See more

sonatype-nexus3 simcube 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-23901.

Container image	Digest	Package	Fixed in
sonatype/nexus3 :3.58.1	586060431b64	shiro-core@1.10.0	2.1.0

Open the chart page →

4,946

shenyutest-helm

1 of 2 See more

shenyu test-helm 2.4.21

1 of the 2 container images this version deploys carry CVE-2026-23901.

Container image	Digest	Package	Fixed in
apache/shenyu-admin :2.4.2	e8b7c4ddd069	shiro-core@1.7.0	2.1.0

Open the chart page →

12,513

Container images carrying it

24 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
apache/shenyu-admin :2.4.2	e8b7c4ddd069	shiro-core@1.7.0	2.1.0	3
library/neo4j :5.20.0	52d3dec8d455	shiro-core@2.0.0	2.1.0	2
library/neo4j :4.3.2-enterprise	56a9453c4064	shiro-core@1.7.1	2.1.0	2
mbentley/omada-controller :4.3	f4e682274bed	shiro-core@1.4.0	2.1.0	2
1dev/server :11.9.0	cd5b12fe5471	shiro-core@1.13.0	2.1.0	1
alfresco/alfresco-activemq :5.18.7-jre17-rockylinux8	5472f88d9b0b	shiro-core@1.13.0	2.1.0	1
apache/shenyu-admin :2.5.1	e2be712fc4f4	shiro-core@1.8.0	2.1.0	1
farberg/apache-knox-docker :1.6.1	4b4a22487394	shiro-core@1.7.0	2.1.0	1
graylog2/server :2.4.3-3	8ff28c66e6c1	shiro-core@1.4.0	2.1.0	1
graylog/graylog :6.1.10	19de1aff48c2	shiro-core@2.0.1	2.1.0	1
ladeit/ladeit :latest	962b665ffe82	shiro-core@1.4.0	2.1.0	1
library/neo4j :4.2.4	348e3f56faa2	shiro-core@1.7.1	2.1.0	1
library/neo4j :2026.02.2	5ab4ab0358cf	shiro-core@2.0.6	2.1.0	1
library/neo4j :5.18.1	8f01f7bb053e	shiro-core@1.13.0	2.1.0	1
library/neo4j :3.4.5-enterprise	a1ba477fa412	shiro-core@1.4.0	2.1.0	1
mintproject/model-catalog-endpoint :29256555a6fbaefae4729d5cd259564708a4ab04	ffbb13f20465	shiro-core@1.2.6	2.1.0	1
pmoscode/axelor-open-suite :v7.2.57	a58f4d762f5c	shiro-core@1.9.1	2.1.0	1
richardchesterwood/k8s-fleetman-queue :release2	f7f8d5951155	shiro-core@1.10.1	2.1.0	1
scmmanager/scm-manager :3.12.1	bfb766050f34	shiro-core@1.13.0	2.1.0	1
sonatype/nexus3 :3.58.1	586060431b64	shiro-core@1.10.0	2.1.0	1
stain/jena-fuseki :latest	b1d0c96f19ad	shiro-core@2.0.1	2.1.0	1
strangebee/thehive :5.7.6-1	e77b713124dd	shiro-core@1.13.0	2.1.0	1
thelastpickle/cassandra-reaper :1.3.0	9c53996c457d	shiro-core@1.2.3	2.1.0	1
ghcr.io/jenkins-x/nexus :0.1.37	8caf5289fe73	shiro-core@1.6.0	2.1.0	1