wso2/carbon-apimgt Security Advisories | GitStock

critical2026-02-19

carbon-apimgt does not properly restrict uploaded files

GHSA-p6jf-79j3-33f3 · CVE-2025-13590

medium2025-09-23

WSO2 carbon-apimgt affected by an authenticated stored cross-site scripting (XSS) vulnerability

GHSA-cmjc-qp7j-xgwr · CVE-2025-4760

medium2023-12-15

WSO2 API Manager allows attackers to change the API rating

GHSA-w7rx-824v-rgx5 · CVE-2023-6835