Repository navigation
Update the OWASP Top 10 page to the 2025 version - #225
Merged
Merged
Conversation
Contributor
|
Hello @cvas22 , could you be sure to read the contribution guide and the Code of Conduct, in particular the use of generative AI |
cvas22
marked this pull request as ready for review
November 10, 2026 21:42
Contributor
Author
|
@jgadsden Updated PR in accordance with the guidelines under contributing. All content was human reviewed, human edited, and human checked to ensure it does what it claims it does in an efficient manner. Please leave a message if you'd like anything else from me. Thx. |
jgadsden
approved these changes
Nov 11, 2026
jgadsden
left a comment
jgadsden
left a comment
Contributor
There was a problem hiding this comment.
Thank you for this pull request @cvas22
The use of AI is acceptable in the changes made here; they read well and this is a useful addition
There is no need to retrospectively create an issue for this, although this is against the contributors guidelines it can justified for these changes
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary :
The Foundations page on the OWASP Top 10 still describes the 2021 list, while the 2025 version is out. This updates every category to 2025: the new order, the renamed categories (Authentication Failures, Software or Data Integrity Failures, Security Logging and Alerting Failures), Software Supply Chain Failures replacing Vulnerable and Outdated Components, SSRF moving into Broken Access Control, and the new A10 Mishandling of Exceptional Conditions. It also adds a short note on what changed from 2021.
The cheat sheet index only has 2021 anchors, so each category now links the relevant cheat sheets directly. I kept the existing text wherever it still applies.
I couldn't find an issue for this, happy to open one if you'd like it tracked that way.
Description for the changelog :
Update the OWASP Top 10 page to the 2025 version
Declaration:
Thanks for submitting a pull request, please make sure:
and agree to the Code of Conduct
in this pull request has been disclosed below:
Claude Code with model Opus 5.5 was used to assist in building this PR. I used it to update the outdated page (from 2021 to 2025).
Other info :
Category names, order and the changes from 2021 are taken from the Top 10 2025 introduction and category pages, and all new links resolve. All content was edited, checked and human reviewed before finalizing this PR. If you have any questions, please leave a message. Thx