OWASP/Top10

View on GitHub

Official OWASP Top 10 Document Repository

Stars: 6.1k
Forks: 1.1k
Open beginner issues: 0
Indexed issues: 19

Dominant language: HTML
License: No license data
Last GitHub push: Aug 5, 2026
Latest indexed: Sep 19, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: No beginner labels indexed
PR merge metrics: No merged PRs in 30d

Beginner friendly Everything

Open All

19 open issues indexed

Can't find WSTG, WWW Community and Top10 on OWASP Open

Difficulty 3/5 1-2 days Newbie friendliness 55/100

OWASP/Top10#966 · 3 comments · Opened Sep 10, 2026
Link broken from https://owasp.org/projects/top-ten to https://owasp.org/Top10/2025 Open

Difficulty 1/5 Under an hour Newbie friendliness 78/100

OWASP/Top10#965 · 4 comments · Opened Sep 10, 2026
2025/docs/en/A01_2025-Broken_Access_Control.md - grammatical error Open

Difficulty 1/5 Under an hour Newbie friendliness 95/100

OWASP/Top10#961 · Opened Jul 28, 2026
Fix “Languagess” typo in 2025 Next Steps Open

Difficulty 1/5 Under an hour Newbie friendliness 95/100

OWASP/Top10#959 · Opened Jul 27, 2026
X01_2025-Next_Steps Website Issue Open

Difficulty 2/5 1-3 hours Newbie friendliness 52/100

OWASP/Top10#946 · 2 comments · Opened Apr 19, 2026
[A07, A09:2025] Incorrect CWE-221, CWE-298, CWE-299 Name in List of Mapped CWEs Open

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

OWASP/Top10#936 · 2 comments · Opened Mar 5, 2026
Increment CalVer to 2026 Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

OWASP/Top10#935 · Opened Mar 4, 2026
No PDF versions of Top 10 2021 and Top 10 2025 Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

OWASP/Top10#934 · 1 comment · 3 reactions · Opened Mar 1, 2026
[A01:2025] Incorrect CWE-201 Name in List of Mapped CWEs Open

Difficulty 1/5 Under an hour Newbie friendliness 78/100

OWASP/Top10#930 · 2 comments · Opened Feb 25, 2026
A04: it is not possible to encrypt at the transport layer Open

Difficulty 2/5 1-3 hours Newbie friendliness 48/100

OWASP/Top10#924 · 7 comments · Opened Feb 13, 2026
MAESTRO threat modeling using AI Playbook Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

OWASP/Top10#922 · Opened Feb 12, 2026
2025/docs/assets/Top10Mapping.xlsx has outdated information Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

OWASP/Top10#919 · 1 comment · Opened Jan 28, 2026
"CWE-601: URL Redirection to Untrusted Site ('Open Redirect')" falls under "A01:2025 Broken Access Control" Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

OWASP/Top10#918 · 1 comment · Opened Jan 28, 2026
Wrong CWE list in X01:2025 (copied from A06) Open

Difficulty 3/5 1-2 days Newbie friendliness 48/100

OWASP/Top10#914 · 2 comments · Opened Jan 26, 2026
A03's "List of Mapped CWEs"Link Error Open

Difficulty 1/5 Under an hour Newbie friendliness 55/100

OWASP/Top10#907 · 2 comments · 1 reaction · Opened Jan 8, 2026
Typos in the 2025 version Open

OWASP/Top10#898 · 13 comments · 1 assignee · Opened Jan 3, 2026
2021: mobile layout broken site-wide Open

not-2025-critical

Difficulty 3/5 1-2 days Newbie friendliness 25/100

OWASP/Top10#884 · Opened Dec 24, 2025
Polyfill as an example of Supply Chain attack Open

2021

Difficulty 2/5 1-3 hours Newbie friendliness 38/100

OWASP/Top10#812 · 2 comments · Opened Sep 14, 2025
Missing links in some languages Open

2021

OWASP/Top10#775 · 6 comments · 1 assignee · Opened Oct 6, 2023

OWASP/Top10

Get new issues in your inbox