---
schema_version: "1"
id: d7f31ebae225510c1eca451cfde0d5c0000a4e5b417c51035169b36e92ca1bb0
title: WSS Module Release Notes
collection: mulesoft
version: current
locale: en-us
portal_url: https://docs.salesforce.com/mulesoft/current/en-us/release-notes/connector/wss-module-release-notes-mule-4.md
canonical_url: https://docs.mulesoft.com/release-notes/connector/wss-module-release-notes-mule-4
source_site: docs.mulesoft.com
content_type: documentation
content_hash: 8286723d383b138da63c1b4d84644ca412fbd6153447a00f862ee5dac563a423
description: MuleSoft Documentation Site
latest: true
---
---
product: Release Notes
version: master
---

# WSS Module Release Notes

> For the full documentation index, see: https://docs.mulesoft.com/llms.txt

WSS Module enables you to process and validate an inbound SOAP request against a given Web Service
Security (WSS) extension configuration to, for example, validate the request signature, perform an
LDAP authentication, or decrypt the inbound message. WSS Module also enables you to sign your
response by adding a WSS header to it, or to encrypt your outbound message.

Guide: [WSS Module Connector User Guide](https://docs.mulesoft.com/wss-module/latest/)

## 2.2.5

**October 22, 2026**

### What’s New

- The WSS Module updates the **Spring Framework** and **Micrometer** libraries to address reported
  security vulnerabilities.

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><div><div><p>The WSS Module updates the <strong>Spring Framework</strong> and <strong>Micrometer</strong> libraries to address reported security vulnerabilities.</p></div></div></td><td><div><div><p>W-24440865</p></div></div></td></tr></tbody></table>

## 2.2.4

**October 1, 2026**

### What’s New

- This release includes only non-user-impacting changes.

## 2.2.3

**July 29, 2026**

### What’s New

- The WSS Module updates the **Spring LDAP** and **Spring Expression** libraries to address reported
  security vulnerabilities.

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><div><div><p>The WSS Module updates the <code>spring-ldap-core</code> and <code>spring-expression</code> libraries to address reported security vulnerabilities.</p></div></div></td><td><div><div><p>W-23569598</p></div></div></td></tr></tbody></table>

## 2.2.2

**July 15, 2026**

### What’s New

- The WSS Module updates the **Spring Framework** libraries to address reported security
  vulnerabilities.

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><div><div><p>The WSS Module updates the <code>spring-core</code> library to 6.2.19 and the <code>spring-context</code> library to 6.2.19 to address reported security vulnerabilities.</p></div></div></td><td><div><div><p>W-23286572</p></div></div></td></tr></tbody></table>

## 2.2.1

**May 21, 2026**

### What’s New

- The WSS Module updates the `guava` and `spring-security-ldap` libraries to address reported
  security vulnerabilities.

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><div><div><p>The WSS Module updates the <code>guava</code> library to version 32.0.1 to address reported security vulnerabilities.</p></div></div></td><td><div><div><p>W-22373455</p></div></div></td></tr><tr><td><div><div><p>The WSS Module updates the <code>spring-security-ldap</code> library to version 6.5.10 to address reported security vulnerabilities.</p></div></div></td><td><div><div><p>W-22392922</p></div></div></td></tr></tbody></table>

## 2.2.0

**May 4, 2026**

### What’s New

- Identify API operations more easily with dynamic telemetry traces

  WSS Module 2.2.0 introduces dynamic telemetry traces for easier API operation identification. This
  enhancement improves visibility into API behavior and performance, streamlining troubleshooting
  and optimization.

## 2.1.1

**April 3, 2026**

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><div><div><p>The <strong>org.springframework.security:spring-security</strong> library is upgraded to version 6.5.9 to address reported security vulnerabilities.</p></div></div></td><td><div><div><p>W-21703721</p></div></div></td></tr></tbody></table>

## 2.1.0

**March 20, 2026**

### What’s New

- WSS Module upgrades the default hashing algorithm from SHA-1 to SHA-256 to enhance cryptographic
  security and ensure alignment with FIPS 140-3 approved standards.

### Compatibility

<table><colgroup><col> <col></colgroup><thead><tr><th>Application/Service</th><th>Version</th></tr></thead><tbody><tr><td><p>Mule</p></td><td><p>4.9.0 and later</p></td></tr><tr><td><p>OpenJDK</p></td><td><p>17</p></td></tr></tbody></table>

## 2.0.3

**January 13, 2026**

### Compatibility

<table><colgroup><col> <col></colgroup><thead><tr><th>Application/Service</th><th>Version</th></tr></thead><tbody><tr><td><p>Mule</p></td><td><p>4.9.0 and later</p></td></tr><tr><td><p>OpenJDK</p></td><td><p>17</p></td></tr></tbody></table>

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><div><div><p>The <code>processSecurity()</code> method no longer creates a thread bottleneck that reduces throughput under high concurrency.</p></div></div></td><td><div><div><p>W-20816910</p></div></div></td></tr></tbody></table>

## 2.0.2

**November 7, 2025**

### Compatibility

<table><colgroup><col> <col></colgroup><thead><tr><th>Application/Service</th><th>Version</th></tr></thead><tbody><tr><td><p>Mule</p></td><td><p>4.9.0 and later</p></td></tr><tr><td><p>OpenJDK</p></td><td><p>17</p></td></tr></tbody></table>

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><div><div><p>The <code>spring</code> library is upgraded to address reported security vulnerabilities.</p></div></div></td><td><div><div><p>W-20009365</p></div></div></td></tr></tbody></table>

## 2.0.1

**September 15, 2025**

### Compatibility

<table><colgroup><col> <col></colgroup><thead><tr><th>Application/Service</th><th>Version</th></tr></thead><tbody><tr><td><p>Mule</p></td><td><p>4.9.0 and later</p></td></tr><tr><td><p>OpenJDK</p></td><td><p>17</p></td></tr></tbody></table>

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><div><div><p>The <code>spring-core</code> library is upgraded to version 6.2.10 to address reported security vulnerabilities.</p></div></div></td><td><div><div><p>W-19578309</p></div></div></td></tr></tbody></table>

## 2.0.0

**June 27, 2025**

### What’s New

- WSS Module (and its dependencies) are now compilable and compatible only with Java 17.

- To align with modern development practices and ensure continued compatibility with secure and
  supported libraries, WSS Module is upgraded from Spring 5.x to Spring 6.x.

- In the **Encryption Config** type, the `EMBEDDED_KEY_NAME` option has been removed from the
  **Encryption Key Identifier** field.

For more information about how to upgrade the connector to version 2.0, refer to
[Upgrading and Migrating WSS Module to Version 2.2](https://docs.mulesoft.com/wss-module/latest/wss-module-upgrade-migrate).

### Compatibility

<table><colgroup><col> <col></colgroup><thead><tr><th>Application/Service</th><th>Version</th></tr></thead><tbody><tr><td><p>Mule</p></td><td><p>4.9.0 and later</p></td></tr><tr><td><p>OpenJDK</p></td><td><p>17</p></td></tr></tbody></table>

## 1.2.3

**March 21, 2025**

### What’s New

- This release upgrades some dependencies to address reported security vulnerabilities.

### Compatibility

<table><colgroup><col> <col></colgroup><thead><tr><th>Application/Service</th><th>Version</th></tr></thead><tbody><tr><td><p>Mule</p></td><td><p>4.1.1 and later</p></td></tr><tr><td><p>OpenJDK</p></td><td><p>8, 11, and 17</p></td></tr></tbody></table>

## 1.2.2

**May 30, 2024**

### What’s New

- This release fixes issues and updates dependencies.

### Compatibility

<table><colgroup><col> <col></colgroup><thead><tr><th>Application/Service</th><th>Version</th></tr></thead><tbody><tr><td><p>Mule</p></td><td><p>4.1.1 and later</p></td></tr><tr><td><p>OpenJDK</p></td><td><p>8, 11, and 17</p></td></tr></tbody></table>

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><div><div><p>The WSS module now raises an error when a validation fails after passing a fake certificate in the request.</p></div></div></td><td><div><div><p>W-15715423</p></div></div></td></tr><tr><td><div><div><p>WSS now has the option to leave the encryption digest algorithm empty.</p></div></div></td><td><div><div><p>W-14094903</p></div></div></td></tr></tbody></table>

## 1.2.1

**May 2, 2024**

### What’s New

- WSS module is now FIPS 140-2 compliant.

### Compatibility

<table><colgroup><col> <col></colgroup><thead><tr><th>Application/Service</th><th>Version</th></tr></thead><tbody><tr><td><p>Mule</p></td><td><p>4.1.1 and later</p></td></tr><tr><td><p>OpenJDK</p></td><td><p>8, 11, and 17</p></td></tr></tbody></table>

## 1.2.0

**February 20, 2024**

### What’s New

- This connector is now compatible with Java 17.

### Compatibility

<table><colgroup><col> <col></colgroup><thead><tr><th>Application/Service</th><th>Version</th></tr></thead><tbody><tr><td><p>Mule</p></td><td><p>4.1.1 and later</p></td></tr><tr><td><p>OpenJDK</p></td><td><p>8, 11, and 17</p></td></tr></tbody></table>

## 1.1.4

**February 15, 2024**

### Compatibility

<table><colgroup><col> <col></colgroup><thead><tr><th>Application/Service</th><th>Version</th></tr></thead><tbody><tr><td><p>Mule</p></td><td><p>4.1.1 and later</p></td></tr></tbody></table>

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><div><div><p>The WSS module now checks if the security tag is not empty.</p></div></div></td><td><div><div><p>W-15042975</p></div></div></td></tr></tbody></table>

## 1.1.3

**June 12, 2023**

### Compatibility

<table><colgroup><col> <col></colgroup><thead><tr><th>Application/Service</th><th>Version</th></tr></thead><tbody><tr><td><p>Mule</p></td><td><p>4.1.1 and later</p></td></tr></tbody></table>

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><div><div><p>The WSS module now correctly removes the certificate from Object Store upon flow completion.</p></div></div></td><td><div><div><p>W-12697701</p></div></div></td></tr></tbody></table>

## 1.1.2

**March 10, 2023**

### Compatibility

<table><colgroup><col> <col></colgroup><thead><tr><th>Application/Service</th><th>Version</th></tr></thead><tbody><tr><td><p>Mule</p></td><td><p>4.1.1 and later</p></td></tr></tbody></table>

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><div><div><p><strong>mustUnderstand</strong> attribute is applied according to the outbound configuration.</p></div></div></td><td><div><div><p>W-12644155</p></div></div></td></tr></tbody></table>

## 1.1.1

**June 21, 2022**

### Compatibility

<table><colgroup><col> <col></colgroup><thead><tr><th>Application/Service</th><th>Version</th></tr></thead><tbody><tr><td><p>Mule</p></td><td><p>4.1.1 and later</p></td></tr></tbody></table>

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue</th><th>ID</th></tr></thead><tbody><tr><td><div><div><p>The initialization of the WSS library no longer displays an error on Mule applications without inbound configurations.</p></div></div></td><td><div><div><p>W-11261692</p></div></div></td></tr></tbody></table>

## 1.1.0

**March 08, 2022**

### Minimum Mule Version

Mule 4.1.1

### New Features and Enhancements

- The "Apply WSS" operation now has a parameter that enables you to add a timestamp to the security
  header (W-10655907)

## 1.0.4

**Feb 14, 2022**

### Minimum Mule Version

Mule 4.1.1

### New Features and Enhancements

- Internal changes related to automation processes (W-10564213)

## 1.0.3

**Dec 1, 2021**

### Minimum Mule Version

Mule 4.1.1

### New Features and Enhancements

Add support for Java JDK 11

## 1.0.2

**Apr 21, 2021**

### Minimum Mule Version

Mule 4.1.1

### New Features and Enhancements

The encryption configuration (`encryptionConfig`) with `encryptionKeyIdentifier` as
`DIRECT_REFERENCE` now generates a binary security token (`BinarySecurityToken`).

## 1.0.1

**Feb 25, 2021**

### Minimum Mule Version

Mule 4.1.1

### New Features and Enhancements

Internal changes related to automation processes

## 1.0.0

**Oct 7, 2020**

### Minimum Mule Version

Mule 4.1.1

### New Features and Enhancements

Initial release.

## See Also

- [Salesforce Help](https://help.salesforce.com)

- [MuleSoft Services](https://www.mulesoft.com/support-and-services)

- [Known Issues](https://help.salesforce.com/s/issues)