wso2/carbon-identity-framework Security Advisories | GitStock

low2025-09-26

WSO2's Input Validation Management Service contains Observable Discrepancy when Multi-Attribute Login is enabled

GHSA-w82p-r9vw-4rg5 · CVE-2025-1396

medium2025-06-02

WSO2 products vulnerable to Cross-site Scripting

GHSA-xpxp-r8hf-wgf6 · CVE-2024-8008

medium2025-06-02

WSO2 is vulnerable to Open Redirect through multi-option URL in its authentication endpoint

GHSA-cp5v-2hmc-3vjx · CVE-2024-1440