Security Advisories¶

Following pages list the security advisories that we have released in each year. For information regarding the vulnerability management process that we follow, refer WSO2 Security Vulnerability Management Process page.

WSO2 is a CVE Numbering Authority (CNA); its CVE assignment scope is on the Reward and Acknowledgement Program page. Advisories published before WSO2 became a CNA give a CVE ID only where another CNA, such as MITRE, assigned one.

• 2026 Advisories
• 2025 Advisories
• 2024 Advisories
• 2023 Advisories
• 2022 Advisories
• 2021 Advisories
• 2020 Advisories
• 2019 Advisories
• 2018 Advisories
• 2017 Advisories
• 2016 Advisories

[email protected] mailing list is used to announce security vulnerabilities in WSO2 products and services. If you wish to subscribe to this mailing list, email to security-announce-request@wso2.org with the header 'subscribe'.