[java-sig-commits] [Bug 1774726] New: CVE-2019-12422 shiro: Cookie padding oracle vulnerability with default configuration