--- title: Vulnerabilities --- ## Not applicable * **CVE-2014-0114**: BeanUtils is transitive dependency of Apache Shiro. It is only used to wire shiro components. * **SONATYPE-2016-0026**: We disabled the "remember me" feature completly.