org.wso2.carbon.identity.framework:org.wso2.carbon.identity.application.authentication.framework vulnerabilities

CVEs whose affected-version data names the org.wso2.carbon.identity.framework:org.wso2.carbon.identity.application.authentication.framework package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-5802Medium· 5.3

1w ago

The self-registration flow accepts user-supplied input for usernames without adequately preventing the disclosure of username existence

The self-registration flow accepts user-supplied input for usernames without adequately preventing the disclosure of username existence. When a user attempts to register with an existing username, the system responds with an error messag…

▾ SunlitWSO2 · WSO2 API ManagerEPSS 0.25%via NVD