Shiro 1.4.0 has component vulnerability, please upgrade it to >= 1.4.2

[keyihao]

We tried the pre-built docker image and our corp vulnerability system warns that Shiro 1.4.0 has Padding Vulnerability [https://issues.apache.org/jira/browse/SHIRO-721]. Please help upgrade the Shiro version to >= 1.4.2. Thanks.

[tvc12]

hi @keyihao ,
Thank you for the issue, for a better way. You can manually upgrade Shiro in the pom.xml file. We will release an upgrade in the next release.