Skip to content

Security and Compliance Documentation

Choreo Security Bulletins for 2026

Show all

Initializing search

WSO2 Security and Compliance Documentation

wso2/docs-security

Home
Security Processes
Security Processes

Security Guidelines
Security Guidelines
- Secure Engineering Guidelines
  Secure Engineering Guidelines
  - Secure Coding Guidelines
    Secure Coding Guidelines
    
    Introduction
    
    Secure Coding Guide
    
    React
    
    OWASP Top 10 - 2025 Prevention
    
    OWASP API Security Top 10 - 2023 Prevention
    
    Tooling Recommendations for Secure Coding
  - Security Related HTTP Headers
  - OWASP CSRFGuard
  - Static Code Analysis using FindSecurityBugs
  - Dynamic Analysis with OWASP ZAP
  - External Dependency Analysis using OWASP Dependency Check
- Security Guidelines for Production Deployment

Security Announcements
Security Announcements
- WSO2 Security Advisories
  WSO2 Security Advisories
  - 2026 Advisories
    2026 Advisories
    
    WSO2-2026-5854
    
    WSO2-2026-5328
    
    WSO2-2026-5236
    
    WSO2-2026-5212
    
    WSO2-2026-5174
    
    WSO2-2026-5164
    
    WSO2-2026-5146
    
    WSO2-2026-5100
    
    WSO2-2026-5077
    
    WSO2-2026-5072
    
    WSO2-2026-5059
    
    WSO2-2026-5051
    
    WSO2-2026-5039
    
    WSO2-2026-5002
    
    WSO2-2026-5001
    
    WSO2-2025-4973
    
    WSO2-2025-4918
    
    WSO2-2025-4897
    
    WSO2-2025-4891
    
    WSO2-2025-4849
    
    WSO2-2026-4844
    
    WSO2-2025-4829
    
    WSO2-2025-4800
    
    WSO2-2025-4771
    
    WSO2-2025-4751
    
    WSO2-2025-4733
    
    WSO2-2025-4731
    
    WSO2-2025-4727
    
    WSO2-2025-4684
    
    WSO2-2025-4672
    
    WSO2-2025-4619
    
    WSO2-2026-4608
    
    WSO2-2025-4597
    
    WSO2-2025-4583
    
    WSO2-2025-4577
    
    WSO2-2025-4530
    
    WSO2-2025-4525
    
    WSO2-2025-4517
    
    WSO2-2025-4516
    
    WSO2-2025-4500
    
    WSO2-2025-4493
    
    WSO2-2025-4480
    
    WSO2-2025-4469
    
    WSO2-2025-4438
    
    WSO2-2025-4410
    
    WSO2-2025-4405
    
    WSO2-2025-4401
    
    WSO2-2025-4388
    
    WSO2-2025-4369
    
    WSO2-2025-4353
    
    WSO2-2025-4343
    
    WSO2-2025-4337
    
    WSO2-2025-4316
    
    WSO2-2025-4306
    
    WSO2-2025-4251
    
    WSO2-2025-4227
    
    WSO2-2025-4195
    
    WSO2-2025-4193
    
    WSO2-2025-4177
    
    WSO2-2025-4138
    
    WSO2-2025-4013
    
    WSO2-2025-1613
    
    WSO2-2024-3741
    
    WSO2-2024-3740
    
    WSO2-2024-3581
    
    WSO2-2024-3520
    
    WSO2-2024-3477
    
    WSO2-2024-3391
    
    WSO2-2024-3359
    
    WSO2-2024-3352
    
    WSO2-2024-3281
    
    WSO2-2024-3255
    
    WSO2-2024-3179
    
    WSO2-2024-3115
    
    WSO2-2024-2753
    
    WSO2-2023-3081
    
    WSO2-2023-2729
    
    WSO2-2023-2672
    
    WSO2-2023-2606
    
    WSO2-2022-2281
    
    WSO2-2021-1582
    
    WSO2-2021-1493
  - 2025 Advisories
    2025 Advisories
    
    WSO2-2025-4603
    
    WSO2-2025-4585
    
    WSO2-2025-4526
    
    WSO2-2025-4510
    
    WSO2-2025-4505
    
    WSO2-2025-4503
    
    WSO2-2025-4494
    
    WSO2-2025-4486
    
    WSO2-2025-4483
    
    WSO2-2025-4270
    
    WSO2-2025-4217
    
    WSO2-2025-4124
    
    WSO2-2025-4119
    
    WSO2-2025-4117
    
    WSO2-2025-4115
    
    WSO2-2025-4104
    
    WSO2-2025-4010
    
    WSO2-2025-3993
    
    WSO2-2025-3992
    
    WSO2-2025-3983
    
    WSO2-2025-3961
    
    WSO2-2025-3902
    
    WSO2-2025-3864
    
    WSO2-2025-3857
    
    WSO2-2025-3302
    
    WSO2-2025-3134
    
    WSO2-2024-3805
    
    WSO2-2024-3696
    
    WSO2-2024-3676
    
    WSO2-2024-3606
    
    WSO2-2024-3586
    
    WSO2-2024-3569
    
    WSO2-2024-3490
    
    WSO2-2024-3472
    
    WSO2-2024-3465
    
    WSO2-2024-3461
    
    WSO2-2024-3436
    
    WSO2-2024-3414
    
    WSO2-2024-3403
    
    WSO2-2024-3382
    
    WSO2-2024-3355
    
    WSO2-2024-3254
    
    WSO2-2024-3217
    
    WSO2-2024-3178
    
    WSO2-2024-3149
    
    WSO2-2024-3144
    
    WSO2-2024-2702
    
    WSO2-2023-3098
    
    WSO2-2023-3084
    
    WSO2-2023-3052
    
    WSO2-2023-2850
    
    WSO2-2023-2678
    
    WSO2-2022-1770
  - 2024 Advisories
    2024 Advisories
    
    WSO2-2024-3574
    
    WSO2-2024-3573
    
    WSO2-2024-3566
    
    WSO2-2024-3562
    
    WSO2-2024-3561
    
    WSO2-2024-3450
    
    WSO2-2024-3443
    
    WSO2-2024-3425
    
    WSO2-2024-3348
    
    WSO2-2024-3213
    
    WSO2-2024-3171
    
    WSO2-2024-2701
    
    WSO2-2023-2988
    
    WSO2-2023-2987
    
    WSO2-2023-2972
    
    WSO2-2023-2938
    
    WSO2-2023-2935
    
    WSO2-2023-2864
    
    WSO2-2023-2831
    
    WSO2-2023-2827
    
    WSO2-2023-2808
    
    WSO2-2023-2803
    
    WSO2-2023-2784
    
    WSO2-2023-2626
    
    WSO2-2023-2617
    
    WSO2-2023-2589
    
    WSO2-2023-2577
    
    WSO2-2023-2308
    
    WSO2-2023-2075
    
    WSO2-2022-2353
    
    WSO2-2022-2254
    
    WSO2-2022-2208
    
    WSO2-2022-2203
    
    WSO2-2022-2165
    
    WSO2-2022-2049
    
    WSO2-2022-1988
    
    WSO2-2022-1920
    
    WSO2-2022-1754
  - 2023 Advisories
    2023 Advisories
    
    WSO2-2023-2735
    
    WSO2-2023-2617
    
    WSO2-2023-2447
    
    WSO2-2023-2075
    
    WSO2-2022-2357
    
    WSO2-2022-2182
    
    WSO2-2022-2177
    
    WSO2-2022-2101
    
    WSO2-2022-2055
    
    WSO2-2022-2062
    
    WSO2-2022-2043
    
    WSO2-2022-2023
    
    WSO2-2022-2019
    
    WSO2-2022-1910
    
    WSO2-2022-1821
    
    WSO2-2021-1318
  - 2022 Advisories
    2022 Advisories
    
    WSO2-2022-1923
    
    WSO2-2022-1849
    
    WSO2-2022-1745
    
    WSO2-2022-1698
    
    WSO2-2022-1476
    
    WSO2-2021-1738
    
    WSO2-2021-1720
    
    WSO2-2021-1646
    
    WSO2-2021-1605
    
    WSO2-2021-1603
    
    WSO2-2021-1592
    
    WSO2-2021-1574
    
    WSO2-2021-1573
    
    WSO2-2021-1531
    
    WSO2-2021-1530
    
    WSO2-2021-1524
    
    WSO2-2021-1509
    
    WSO2-2021-1487
    
    WSO2-2021-1482
    
    WSO2-2021-1480
    
    WSO2-2021-1459
    
    WSO2-2021-1438
    
    WSO2-2021-1334
    
    WSO2-2021-1259
  - 2021 Advisories
    2021 Advisories
    
    WSO2-2021-1699
    
    WSO2-2021-1497
    
    WSO2-2021-1453
    
    WSO2-2021-1411
    
    WSO2-2021-1357
    
    WSO2-2021-1351
    
    WSO2-2021-1350
    
    WSO2-2021-1347
    
    WSO2-2021-1338
    
    WSO2-2021-1315
    
    WSO2-2021-1314
    
    WSO2-2021-1292
    
    WSO2-2021-1289
    
    WSO2-2021-1261
    
    WSO2-2021-1260
    
    WSO2-2021-1258
    
    WSO2-2021-1238
    
    WSO2-2020-1233
    
    WSO2-2020-1225
    
    WSO2-2020-1224
    
    WSO2-2020-1196
    
    WSO2-2020-1139
    
    WSO2-2020-1132
    
    WSO2-2020-1130
    
    WSO2-2020-1119
    
    WSO2-2020-1106
    
    WSO2-2020-0873
    
    WSO2-2020-0840
    
    WSO2-2020-0803
    
    WSO2-2020-0787
    
    WSO2-2020-0752
    
    WSO2-2020-0751
    
    WSO2-2020-0716
  - 2020 Advisories
    2020 Advisories
    
    WSO2-2020-0864
    
    WSO2-2020-0843
    
    WSO2-2020-0781
    
    WSO2-2020-0755
    
    WSO2-2020-0747
    
    WSO2-2020-0742
    
    WSO2-2020-0734
    
    WSO2-2020-0731
    
    WSO2-2020-0730
    
    WSO2-2020-0728
    
    WSO2-2020-0727
    
    WSO2-2020-0722
    
    WSO2-2020-0718
    
    WSO2-2020-0713
    
    WSO2-2020-0711
    
    WSO2-2020-0707
    
    WSO2-2020-0706
    
    WSO2-2020-0705
    
    WSO2-2020-0702
    
    WSO2-2020-0701
    
    WSO2-2020-0700
    
    WSO2-2020-0699
    
    WSO2-2020-0698
    
    WSO2-2020-0693
    
    WSO2-2020-0690
    
    WSO2-2020-0689
    
    WSO2-2020-0688
    
    WSO2-2020-0687
    
    WSO2-2020-0685
    
    WSO2-2020-0684
    
    WSO2-2019-0681
    
    WSO2-2019-0673
    
    WSO2-2019-0670
    
    WSO2-2019-0667
    
    WSO2-2019-0666
    
    WSO2-2019-0665
    
    WSO2-2019-0663
    
    WSO2-2019-0651
    
    WSO2-2019-0661
    
    WSO2-2018-0537
  - 2019 Advisories
    2019 Advisories
    
    WSO2-2019-0658
    
    WSO2-2019-0656
    
    WSO2-2019-0655
    
    WSO2-2019-0653
    
    WSO2-2019-0647
    
    WSO2-2019-0646
    
    WSO2-2019-0645
    
    WSO2-2019-0644
    
    WSO2-2019-0636
    
    WSO2-2019-0635
    
    WSO2-2019-0634
    
    WSO2-2019-0633
    
    WSO2-2019-0625
    
    WSO2-2019-0624
    
    WSO2-2019-0621
    
    WSO2-2019-0618
    
    WSO2-2019-0616
    
    WSO2-2019-0600
    
    WSO2-2019-0598
    
    WSO2-2019-0597
    
    WSO2-2019-0571
    
    WSO2-2019-0554
    
    WSO2-2019-0545
    
    WSO2-2019-0504
    
    WSO2-2019-0501
    
    WSO2-2019-0486
    
    WSO2-2019-0432
  - 2018 Advisories
    2018 Advisories
    
    WSO2-2018-0462
  - 2017 Advisories
    2017 Advisories
    
    WSO2-2017-0326
    
    WSO2-2017-0289
    
    WSO2-2017-0267
    
    WSO2-2017-0266
    
    WSO2-2017-0265
    
    WSO2-2017-0263
    
    WSO2-2017-0262
    
    WSO2-2017-0261
    
    WSO2-2017-0260
    
    WSO2-2017-0257
    
    WSO2-2017-0255
    
    WSO2-2017-0254
    
    WSO2-2017-0235
    
    WSO2-2017-0223
    
    WSO2-2017-0218
    
    WSO2-2017-0212
    
    WSO2-2017-0210
    
    WSO2-2017-0203
    
    WSO2-2017-0198
    
    WSO2-2017-0197
    
    WSO2-2017-0190
    
    WSO2-2017-0188
    
    WSO2-2017-0187
    
    WSO2-2017-0186
    
    WSO2-2017-0185
    
    WSO2-2017-0184
    
    WSO2-2017-0183
    
    WSO2-2017-0182
    
    WSO2-2017-0179
    
    WSO2-2017-0177
  - 2016 Advisories
    2016 Advisories
    
    WSO2-2016-0170
    
    WSO2-2016-0169
    
    WSO2-2016-0168
    
    WSO2-2016-0159
    
    WSO2-2016-0158
    
    WSO2-2016-0156
    
    WSO2-2016-0151
    
    WSO2-2016-0150
    
    WSO2-2016-0141
    
    WSO2-2016-0140
    
    WSO2-2016-0138
    
    WSO2-2016-0135
    
    WSO2-2016-0127
    
    WSO2-2016-0104
    
    WSO2-2016-0101
    
    WSO2-2016-0098
    
    WSO2-2016-0096
    
    WSO2-2016-0095
    
    WSO2-2016-0092
- Cloud Security Bulletin
  Cloud Security Bulletin
  - WSO2 Identity Platform
    
    WSO2 Identity Platform
    
    2025
    
    2025
    
    2025 H1
    
    2025 H2
  - Choreo
    
    Choreo
    
    2025
    
    2025
    
    2025 H1
    
    2025 H2
    
    2026
    
    2026
    
    2026 H1
  - WSO2 API Platform
    
    WSO2 API Platform
    
    2025
    
    2025
    
    2025 H2
- CVE Justifications
  CVE Justifications
  - 2026
    
    2026
    
    CVE-2026-71497
    
    CVE-2026-44825
    
    CVE-2026-41851
    
    CVE-2026-41848
    
    GHSA-72hv-8253-57qq
    
    CVE-2026-49875
    
    CVE-2026-2332
    
    CVE-2025-11143
    
    CVE-2024-38820
    
    CVE-2023-49735
    
    CVE-2023-39017
    
    CVE-2021-28490
    
    CVE-2020-11023
    
    CVE-2020-11022
    
    CVE-2020-7656
    
    CVE-2019-11358
    
    CVE-2015-9251
    
    CVE-2012-6708
    
    CVE-2012-5783
    
    Bluebird Memory Leak Vulnerability (NPM)
  - 2025
    
    2025
    
    CVE-2025-66516
    
    CVE-2025-59340
    
    CVE-2025-48913
    
    CVE-2025-47889
    
    CVE-2025-46392
    
    CVE-2025-48924
    
    CVE-2025-22874
    
    CVE-2024-6763
    
    CVE-2023-52428
    
    CVE-2022-36313
    
    CVE-2021-42646
    
    CVE-2017-15708
    
    CVE-2016-1000027
    
    GHSA-593m-55hh-j8gv
    
    CVE-2013-6780
    
    CVE-2012-5881
    
    CVE-2012-5882
    
    CVE-2012-5883
    
    CVE-2025-41249
  - 2024
    
    2024
    
    CVE-2022-45868
    
    CVE-2022-29464
    
    CVE-2022-23221
    
    CVE-2021-23463
  - 2022
    
    2022
    
    CVE-2022-42889
    
    CVE-2022-3602 and CVE-2022-3786
    
    CVE-2022-22965
    
    CVE-2021-42392
    
    log4j v1 vulnerabilities (CVE-2022-23302 CVE-2022-23305 CVE-2022-23307)
  - 2021
    
    2021
    
    ZDI-CAN-13449
  - 2020
    
    2020
    
    CVE-2020-1938
    
    CVE-2020-13226
    
    CVE-2019-6513
    
    CVE-2019-17571
  - 2019
    
    2019
    
    CVE-2019-6515
    
    CVE-2019-6512
  - 2014
    
    2014
    
    CVE-2014-3623
- Incident Clarifications
  Incident Clarifications
Security Reporting
Security Reporting
- Report Security Issues
- Vulnerability Reporting Guidelines
- Reward and Acknowledgement Program
  Reward and Acknowledgement Program
  - Security Hall of Fame
- Reporting Service Abuse or Malicious Content

Choreo Security Bulletins for 2026¶

This section contains the Choreo security bulletins for 2026

2026 H1

© 2024-2026 WSO2 LLC. | Content licensed under CC By 4.0. | Sample code licensed under Apache 2.0.