[java-sig-commits] [Bug 1850070] New: CVE-2020-11989 shiro: spring dynamic controllers, a specially crafted request may cause an authentication bypass [fedora-all]