CVE-2012-5783: Justification

[kavindasr]

$Subject

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: d29c8658-9c3b-4149-85b1-e6cf31ef3cd9

📥 Commits

Reviewing files that changed from the base of the PR and between b966f1b and 17a1f76.

📒 Files selected for processing (3)

• en/docs/security-announcements/cve-justifications/2026/CVE-2012-5783.md
• en/docs/security-announcements/cve-justifications/2026/index.md
• en/mkdocs.yml

💤 Files with no reviewable changes (1)

• en/docs/security-announcements/cve-justifications/2026/CVE-2012-5783.md

✅ Files skipped from review due to trivial changes (1)

• en/docs/security-announcements/cve-justifications/2026/index.md

---

📝 Walkthrough

Added a new justification page and index entry for the 2026 publication year, and updated the main navigation to surface the new content under the CVE justifications section. The new page documents the rationale for the affected product set and notes that no further action is required.

Walkthrough

This pull request adds a new CVE justification document for CVE-2012-5783, dated July 8, 2026, stating no customer action is required and detailing affected WSO2 products (versions 3.1.0–4.7.0). It explains that WSO2's Apache Commons HttpClient fork already implements SSL server hostname verification, concluding no dependency upgrade is needed. The document is linked from the 2026 CVE justifications index page and mkdocs.yml navigation.

Suggested reviewers: ayomawdb, 1uffyD9, tgtshanika

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	The description is only a placeholder and omits the required template sections.	Replace the placeholder with the full template, including Purpose, Goals, Approach, Release note, Documentation, and Security checks.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly names the CVE and indicates the justification change.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[ayomawdb]

@kavindasr Justifications are nested inside folder created for the publication year.