[java-sig-commits] [Bug 1850069] New: CVE-2020-11989 shiro: spring dynamic controllers, a specially crafted request may cause an authentication bypass