Skip to content
Security and Compliance Documentation
Type to start searching
Security Processes
Security Guidelines
Security Announcements
Security Reporting
Report a Security Issue
WSO2 Security and Compliance Documentation
wso2/docs-security
WSO2 Security and Compliance Documentation
Security Processes
Security Processes
Secure Software Development Process
Vulnerability Management Process
Cloud Security Process
Security Incident Notification Process for SaaS
Security Guidelines
Security Guidelines
Secure Engineering Guidelines
Secure Engineering Guidelines
Secure Coding Guidelines
Secure Coding Guidelines
Introduction
General Recommendations for Secure Coding
General Recommendations for React Secure Coding
OWASP Top 10 - 2017 Prevention
OWASP Top 10 - 2013 Prevention
OWASP Mobile Top 10 Prevention
Tooling Recommendations for Secure Coding
Security Related HTTP Headers
OWASP CSRFGuard
Static Code Analysis using FindSecurityBugs
Dynamic Analysis with OWASP ZAP
External Dependency Analysis using OWASP Dependency Check
Security Guidelines for Production Deployment
Security Announcements
Security Announcements
WSO2 Security Advisories
WSO2 Security Advisories
2026 Advisories
2026 Advisories
WSO2-2025-4973
WSO2-2025-4918
WSO2-2025-4849
WSO2-2025-4771
WSO2-2025-4733
WSO2-2025-4684
WSO2-2025-4577
WSO2-2025-4530
WSO2-2025-4525
WSO2-2025-4517
WSO2-2025-4480
WSO2-2025-4469
WSO2-2025-4410
WSO2-2025-4401
WSO2-2025-4388
WSO2-2025-4337
WSO2-2025-4316
WSO2-2025-4251
WSO2-2025-4195
WSO2-2024-3741
WSO2-2024-3740
WSO2-2024-3581
WSO2-2024-3391
WSO2-2024-3359
WSO2-2024-3255
WSO2-2024-3115
WSO2-2023-2729
WSO2-2022-2281
WSO2-2021-1582
WSO2-2021-1493
2025 Advisories
2025 Advisories
WSO2-2025-4603
WSO2-2025-4585
WSO2-2025-4526
WSO2-2025-4510
WSO2-2025-4505
WSO2-2025-4503
WSO2-2025-4494
WSO2-2025-4486
WSO2-2025-4483
WSO2-2025-4270
WSO2-2025-4217
WSO2-2025-4124
WSO2-2025-4119
WSO2-2025-4117
WSO2-2025-4115
WSO2-2025-4104
WSO2-2025-4010
WSO2-2025-3993
WSO2-2025-3992
WSO2-2025-3983
WSO2-2025-3961
WSO2-2025-3902
WSO2-2025-3864
WSO2-2025-3857
WSO2-2025-3302
WSO2-2025-3134
WSO2-2024-3805
WSO2-2024-3696
WSO2-2024-3676
WSO2-2024-3606
WSO2-2024-3586
WSO2-2024-3569
WSO2-2024-3490
WSO2-2024-3472
WSO2-2024-3465
WSO2-2024-3461
WSO2-2024-3436
WSO2-2024-3414
WSO2-2024-3403
WSO2-2024-3382
WSO2-2024-3355
WSO2-2024-3254
WSO2-2024-3217
WSO2-2024-3178
WSO2-2024-3149
WSO2-2024-3144
WSO2-2024-2702
WSO2-2023-3098
WSO2-2023-3084
WSO2-2023-3052
WSO2-2023-2850
WSO2-2023-2678
WSO2-2022-1770
2024 Advisories
2024 Advisories
WSO2-2024-3574
WSO2-2024-3573
WSO2-2024-3566
WSO2-2024-3562
WSO2-2024-3561
WSO2-2024-3450
WSO2-2024-3443
WSO2-2024-3425
WSO2-2024-3348
WSO2-2024-3213
WSO2-2024-3171
WSO2-2024-2701
WSO2-2023-2988
WSO2-2023-2987
WSO2-2023-2972
WSO2-2023-2938
WSO2-2023-2935
WSO2-2023-2864
WSO2-2023-2831
WSO2-2023-2827
WSO2-2023-2808
WSO2-2023-2803
WSO2-2023-2784
WSO2-2023-2626
WSO2-2023-2617
WSO2-2023-2589
WSO2-2023-2577
WSO2-2023-2308
WSO2-2023-2075
WSO2-2022-2353
WSO2-2022-2254
WSO2-2022-2208
WSO2-2022-2203
WSO2-2022-2165
WSO2-2022-2049
WSO2-2022-1988
WSO2-2022-1920
WSO2-2022-1754
2023 Advisories
2023 Advisories
WSO2-2023-2735
WSO2-2023-2617
WSO2-2023-2447
WSO2-2023-2075
WSO2-2022-2357
WSO2-2022-2182
WSO2-2022-2177
WSO2-2022-2101
WSO2-2022-2055
WSO2-2022-2062
WSO2-2022-2043
WSO2-2022-2023
WSO2-2022-2019
WSO2-2022-1910
WSO2-2022-1821
WSO2-2021-1318
2022 Advisories
2022 Advisories
WSO2-2022-1923
WSO2-2022-1849
WSO2-2022-1745
WSO2-2022-1698
WSO2-2022-1476
WSO2-2021-1738
WSO2-2021-1720
WSO2-2021-1646
WSO2-2021-1605
WSO2-2021-1603
WSO2-2021-1592
WSO2-2021-1574
WSO2-2021-1573
WSO2-2021-1531
WSO2-2021-1530
WSO2-2021-1524
WSO2-2021-1509
WSO2-2021-1487
WSO2-2021-1482
WSO2-2021-1480
WSO2-2021-1459
WSO2-2021-1438
WSO2-2021-1334
WSO2-2021-1259
2021 Advisories
2021 Advisories
WSO2-2021-1699
WSO2-2021-1497
WSO2-2021-1453
WSO2-2021-1411
WSO2-2021-1357
WSO2-2021-1351
WSO2-2021-1350
WSO2-2021-1347
WSO2-2021-1338
WSO2-2021-1315
WSO2-2021-1314
WSO2-2021-1292
WSO2-2021-1289
WSO2-2021-1261
WSO2-2021-1260
WSO2-2021-1258
WSO2-2021-1238
WSO2-2020-1233
WSO2-2020-1225
WSO2-2020-1224
WSO2-2020-1196
WSO2-2020-1139
WSO2-2020-1132
WSO2-2020-1130
WSO2-2020-1119
WSO2-2020-1106
WSO2-2020-0873
WSO2-2020-0840
WSO2-2020-0803
WSO2-2020-0787
WSO2-2020-0752
WSO2-2020-0751
WSO2-2020-0716
2020 Advisories
2020 Advisories
WSO2-2020-0864
WSO2-2020-0843
WSO2-2020-0781
WSO2-2020-0755
WSO2-2020-0747
WSO2-2020-0742
WSO2-2020-0734
WSO2-2020-0731
WSO2-2020-0730
WSO2-2020-0728
WSO2-2020-0727
WSO2-2020-0722
WSO2-2020-0718
WSO2-2020-0713
WSO2-2020-0711
WSO2-2020-0707
WSO2-2020-0706
WSO2-2020-0705
WSO2-2020-0702
WSO2-2020-0701
WSO2-2020-0700
WSO2-2020-0699
WSO2-2020-0698
WSO2-2020-0693
WSO2-2020-0690
WSO2-2020-0689
WSO2-2020-0688
WSO2-2020-0687
WSO2-2020-0685
WSO2-2020-0684
WSO2-2019-0681
WSO2-2019-0673
WSO2-2019-0670
WSO2-2019-0667
WSO2-2019-0666
WSO2-2019-0665
WSO2-2019-0663
WSO2-2019-0651
WSO2-2019-0661
WSO2-2018-0537
2019 Advisories
2019 Advisories
WSO2-2019-0658
WSO2-2019-0656
WSO2-2019-0655
WSO2-2019-0653
WSO2-2019-0647
WSO2-2019-0646
WSO2-2019-0645
WSO2-2019-0644
WSO2-2019-0636
WSO2-2019-0635
WSO2-2019-0634
WSO2-2019-0633
WSO2-2019-0625
WSO2-2019-0624
WSO2-2019-0621
WSO2-2019-0618
WSO2-2019-0616
WSO2-2019-0600
WSO2-2019-0598
WSO2-2019-0597
WSO2-2019-0571
WSO2-2019-0554
WSO2-2019-0545
WSO2-2019-0504
WSO2-2019-0501
WSO2-2019-0486
WSO2-2019-0432
2018 Advisories
2018 Advisories
WSO2-2018-0462
2017 Advisories
2017 Advisories
WSO2-2017-0326
WSO2-2017-0289
WSO2-2017-0267
WSO2-2017-0266
WSO2-2017-0265
WSO2-2017-0263
WSO2-2017-0262
WSO2-2017-0261
WSO2-2017-0260
WSO2-2017-0257
WSO2-2017-0255
WSO2-2017-0254
WSO2-2017-0235
WSO2-2017-0223
WSO2-2017-0218
WSO2-2017-0212
WSO2-2017-0210
WSO2-2017-0203
WSO2-2017-0198
WSO2-2017-0197
WSO2-2017-0190
WSO2-2017-0188
WSO2-2017-0187
WSO2-2017-0186
WSO2-2017-0185
WSO2-2017-0184
WSO2-2017-0183
WSO2-2017-0182
WSO2-2017-0179
WSO2-2017-0177
2016 Advisories
2016 Advisories
WSO2-2016-0170
WSO2-2016-0169
WSO2-2016-0168
WSO2-2016-0159
WSO2-2016-0158
WSO2-2016-0156
WSO2-2016-0151
WSO2-2016-0150
WSO2-2016-0141
WSO2-2016-0140
WSO2-2016-0138
WSO2-2016-0135
WSO2-2016-0127
WSO2-2016-0104
WSO2-2016-0101
WSO2-2016-0098
WSO2-2016-0096
WSO2-2016-0095
WSO2-2016-0092
Cloud Security Bulletin
Cloud Security Bulletin
Asgardeo
Asgardeo
2025
2025
2025 H1
2025 H2
Choreo
Choreo
2025
2025
2025 H1
WSO2 API Platform
WSO2 API Platform
2025
2025
2025 H2
CVE Justifications
CVE Justifications
2026
2026
GHSA-72hv-8253-57qq
CVE-2026-2332
CVE-2025-11143
CVE-2021-28490
CVE-2023-39017
CVE-2020-11023
CVE-2020-11022
CVE-2020-7656
CVE-2019-11358
CVE-2015-9251
CVE-2012-6708
2025
2025
CVE-2025-66516
CVE-2025-59340
CVE-2025-48913
CVE-2025-47889
CVE-2025-46392
CVE-2025-48924
CVE-2025-22874
CVE-2024-6763
CVE-2023-52428
CVE-2021-42646
CVE-2017-15708
CVE-2016-1000027
GHSA-593m-55hh-j8gv
CVE-2013-6780
CVE-2012-5881
CVE-2012-5882
CVE-2012-5883
CVE-2025-41249
2024
2024
CVE-2022-45868
CVE-2022-29464
CVE-2022-23221
CVE-2021-23463
2022
2022
CVE-2022-42889
CVE-2022-3602 and CVE-2022-3786
CVE-2022-22965
CVE-2021-42392
log4j v1 vulnerabilities (CVE-2022-23302 CVE-2022-23305 CVE-2022-23307)
2021
2021
ZDI-CAN-13449
2020
2020
CVE-2020-1938
CVE-2020-13226
CVE-2019-6513
CVE-2019-17571
2019
2019
CVE-2019-6515
CVE-2019-6512
2014
2014
CVE-2014-3623
Incident Clarifications
Incident Clarifications
2026
2026
Axios NPM Supply Chain Compromise
2025
2025
NPM Packages Compromised in Supply Chain Attack
NPM Supply Chain Attack - Shai-Hulud 2.0
2021
2021
Codecov supply chain breach
NPM packages coa and rc Compromised
NPM package UA-Parser-JS Compromised
Log4j2 zero-day vulnerability (CVE-2021-44228 / CVE-2021-45046 / CVE-2021-45105)
CVE-2021-4104
2020
2020
SolarWinds SUNBURST breach
Security Reporting
Security Reporting
Report Security Issues
Vulnerability Reporting Guidelines
Reward and Acknowledgement Program
Reward and Acknowledgement Program
Reward and Acknowledgement Program
Security Hall of Fame
Reporting Service Abuse or Malicious Content
404 - Not found
Cloud Security Bulletins
¶
This section contains the security bulletins for Asgardeo
2025