-
Hi team,
Any plans to include new flags to cover the new [OWASP API Security Top 10 2023 risks][1]?
Cheers,
Paulo A. Silva
[1]: https://owasp.org/API-Security/editions/2023/en/0x11-t10/
-
### Provide environment information
Next js 14
"@ducanh2912/next-pwa": "^10.2.9",
### Link to reproduction - Issues with a link to complete (but minimal) reproduction code help us address them fast…
-
Extract the 10 testability patterns for PHP that are more impactful for SAST tools.
- we can start with the results from the NDSS paper
- if possible re-measure SAST tools against the reviewed PHP pa…
-
In the Vulnerabilities library, if you click the OWASP Top 10 2013 folder, you get only the OWASP Vulnerability articles, but not the OWASP Attack articles.
Request: Please add the OWASP Attack arti…
-
_[Migrated from Assembla ticket [29](https://www.assembla.com/spaces/scrupal/tickets/29) - reported by @reid-spencer on 2014-11-17 22:02:08.000]_
https://www.owasp.org/index.php/Top10#OWASP_Top_10_fo…
-
Hi there,
Could @cscasanovas123 or @mtesauro or one of the OWASP GitHub owners please delete the old OWASP Top 10 repo? It is publishing a github.io page that is confusing the SEO of the real repo…
-
As the title says the OWASP TOP 10 profile is out of date.
-
-
We analyzed the android apk with Mobsf security tool and find the below.
1.
CWE: CWE-327: Use of a Broken or Risky Cryptographic Algorithm
OWASP Top 10: M5: Insufficient Cryptography
OWASP MASVS…
-
这是一份OWASP TOP10变更对比，不过注入始终是NO.1,多出来个XXE,把错误配置，和授权绕过排名提高关注。 作为第一次阅读OWASP 的白皮书，除了系统化一下整个…