org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.gateway vulnerabilities

CVEs whose affected-version data names the org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.gateway package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-3415High· 8.7

1mo ago

XML External Entity (XXE) Injection via Schema Validation in Multiple WSO2 Products Allows File Reading and Denial of Service

The XML and schema validation functionalities within the SchemaValidator Mediator process XML input as part of validation flows. Under certain conditions, the XML parser allows the resolution of external entities when handling user-suppl…

▾ TwilightWSO2 · WSO2 API ManagerEPSS 0.49%via CVEORG