Upgrade Shiro to 1.7.1, fixes #280

Author: adrienlauer

CHANGELOG.md

@@ -1,6 +1,7 @@
 # Version 3.12.0 (2021-01-31)
 
 * [chg] Move main entrypoint logic from `SeedMain.main()` to `Seed.launch()`, allowing custom main methods in addition to the built-in `SeedMain`. 
+* [chg] Upgrade Shiro to 1.7.1 (fixes CVE-2020-11989, CVE-2020-17510, CVE-2020-1957, CVE-2020-13933 and CVE-2019-12422).
 * [fix] Detection of color output under recent versions of IntelliJ.
 
 # Version 3.11.0 (2020-10-28)

pom.xml

@@ -31,7 +31,7 @@
         <guice.version>4.2.3</guice.version>
         <guava.version>29.0-jre</guava.version>
         <typetools.version>0.5.0</typetools.version>
-        <shiro.version>1.4.0</shiro.version>
+        <shiro.version>1.7.1</shiro.version>
         <undertow.version>2.1.3.Final</undertow.version>
         <jersey2.version>2.31</jersey2.version>
         <hibernate-validator.version>6.1.5.Final</hibernate-validator.version>