Skip to content

Security and Compliance Documentation

2025 Incident Clarifications

Show all

Initializing search

WSO2 Security and Compliance Documentation

wso2/docs-security

Home
Security Processes
Security Processes

Security Guidelines
Security Guidelines
- Secure Engineering Guidelines
  Secure Engineering Guidelines
  - Secure Coding Guidelines
    Secure Coding Guidelines
    
    Introduction
    
    Secure Coding Guide
    
    React
    
    OWASP Top 10 - 2025 Prevention
    
    OWASP API Security Top 10 - 2023 Prevention
    
    Tooling Recommendations for Secure Coding
  - Security Related HTTP Headers
  - OWASP CSRFGuard
  - Static Code Analysis using FindSecurityBugs
  - Dynamic Analysis with OWASP ZAP
  - External Dependency Analysis using OWASP Dependency Check
- Security Guidelines for Production Deployment

Security Announcements
Security Announcements
- WSO2 Security Advisories
  WSO2 Security Advisories
- Cloud Security Bulletin
  Cloud Security Bulletin
- CVE Justifications
- Incident Clarifications
  Incident Clarifications
Security Reporting
Security Reporting
- Report Security Issues
- Vulnerability Reporting Guidelines
- Reward and Acknowledgement Program
  Reward and Acknowledgement Program
  - Security Hall of Fame
- Reporting Service Abuse or Malicious Content

2025 Incident Clarifications¶

NPM Supply Chain Attack - Shai-Hulud 2.0
NPM Packages Compromised in Supply Chain Attack

© 2024-2026 WSO2 LLC. | Content licensed under CC By 4.0. | Sample code licensed under Apache 2.0.