All pull requests

Pull requests

• Fixing path traversal issues

  #4628·HiranyaKavishani opened Sep 1, 2026·

  ·
  1

• Enforcing authentication and authorization for filedownload service

  #4627·HiranyaKavishani opened Sep 1, 2026·

  ·
  1

• Fixing zip bomb vulnerability for carbon app deployement flow.

  #4626·HiranyaKavishani opened Sep 1, 2026·

  ·
  1

• Remove the pre-update lock on a user's attribute rows

  #4624·sadilchamishka opened Aug 24, 2026·

  ·
  19

• Support OR based conditional filtering in the JDBC user store

  #4621·sadilchamishka opened Aug 20, 2026·

  ·
  5

• Enable PQ TLS for outbound com by default

  #4617·hwupathum opened Aug 12, 2026·

  ·
  3

• [4.11.x] Port tomcat template configs for web portal securing

  #4614·HeshanSudarshana opened Aug 5, 2026·

  ·
  1

• [APIM][4.11.x] Add any-size Secret Encryption to CryptoUtil

  #4613·hisanhunais opened Aug 3, 2026·

  ·
  15

• Ensure cache listeners are correctly notified on cache invalidation

  #4606·Zeta201 opened Jun 25, 2026·

  ·
  5

• Add unit tests for ClassUtils to cover exception paths

  #4603·Jandiu123 opened Jun 15, 2026·

  ·
  5

• Improve username claim validation to handle domain-prefixed usernames during JIT provisioning

  #4578·Zeta201 opened Apr 10, 2026·

  ·
  8

• Add codecov config

  #4568·Zeta201 opened Apr 6, 2026·

  ·
  7

• Remove Java Security Manager

  #4541·madurangasiriwardena opened Mar 12, 2026Member·

  ·
  14

• Fix: Downgrade FileUploadExecutorManager missing log to debug #4535

  #4539·UmairStn opened Mar 11, 2026·

  ·
  7

• Remove csrfguard register from web.xml

  #4533·Zeta201 opened Mar 10, 2026·

  ·
  12

• Suppress JDK 25 related warnings

  #4521·Zeta201 opened Feb 25, 2026·

  ·
  1

• [4.12.x]Support for HSM-backed Keystores for Signing and Encryption

  #4518·RivinduM opened Feb 25, 2026·

  ·
  6

• Bump pax-logging version to 2.2.9-wso2v2

  #4503·gayaldassanayake opened Feb 20, 2026Contributor·

  ·
  1

• Provide support to add named configs map for authenticators

  #4363·sahandilshan opened Aug 24, 2025·

  ·
  14

• Add support for periodic cache clean up

  #4275·inthirakumaaran opened Mar 31, 2025·

  ·
  6

• [4.10.x] Enabling Registry Read-only mode through deployment.toml

  #3936·CharinduThisara opened Mar 14, 2024·

  ·
  1

• Upgrading jackson-databind and guava dependencies

  #3675·tgtshanika opened Sep 25, 2023·

  ·
  1

• Invalidate Session during a SAML2 based SSO logout

  #3591·SanojPunchihewa opened Jun 20, 2023·

  ·

• Fix invalid url error message

  #2867·menakaj opened Dec 14, 2020·

  ·