Skip to content

Security and Compliance Documentation

2021 Incident Clarifications

Show all

Initializing search

WSO2 Security and Compliance Documentation

wso2/docs-security

Home
Security Processes
Security Processes

Security Guidelines
Security Guidelines
- Secure Engineering Guidelines
  Secure Engineering Guidelines
  - Secure Coding Guidelines
    Secure Coding Guidelines
    
    Introduction
    
    Secure Coding Guide
    
    React
    
    OWASP Top 10 - 2025 Prevention
    
    OWASP API Security Top 10 - 2023 Prevention
    
    Tooling Recommendations for Secure Coding
  - Security Related HTTP Headers
  - OWASP CSRFGuard
  - Static Code Analysis using FindSecurityBugs
  - Dynamic Analysis with OWASP ZAP
  - External Dependency Analysis using OWASP Dependency Check
- Security Guidelines for Production Deployment

Security Announcements
Security Announcements
- WSO2 Security Advisories
  WSO2 Security Advisories
- Cloud Security Bulletin
  Cloud Security Bulletin
- CVE Justifications
- Incident Clarifications
  Incident Clarifications
Security Reporting
Security Reporting
- Report Security Issues
- Vulnerability Reporting Guidelines
- Reward and Acknowledgement Program
  Reward and Acknowledgement Program
  - Security Hall of Fame
- Reporting Service Abuse or Malicious Content

2021 Incident Clarifications¶

CVE-2021-4104
Log4j2 zero-day vulnerability (CVE-2021-44228 / CVE-2021-45046 / CVE-2021-45105)
NPM packages coa and rc Compromised
NPM package UA-Parser-JS Compromised
Codecov supply chain breach

© 2024-2026 WSO2 LLC. | Content licensed under CC By 4.0. | Sample code licensed under Apache 2.0.