OWASP / OWASP/ASVS

Clarification: V1.4

Open
#3,221 10 comments 0 reactions 1 assignee View on GitHub

@tghosth is already working on this.

Since Jul 23, 2025.

requires change control V1 (prev V5)
Dominant language
HTML
Stars
3.6k
Forks
831
Avg merge
7h 55m
Merged PRs (30d)
4

Description

V1.4 Memory, String, and Unmanaged Code
The following requirements address risks associated with unsafe memory use, which generally apply when the application uses a systems language or unmanaged code.

This statement overgeneralizes integer overflow vulnerability as strictly a memory-unsafe risk relevant only to unmanaged code. Which is not fully correct, as this issue remain relevant even in modern managed languages, particularly in specific contexts. I think there must be clear separation between memory management risks and data validation risks.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.