Search results

Clarification: V1.4

V1 (prev V5)

Status: Open.

#3221 In OWASP/ASVS;

· ajayojha opened on Jul 21, 2025

Clarification: V1.3.8 "JNDI injection attacks"

V1 (prev V5)

Status: Open.

#3220 In OWASP/ASVS;

· ajayojha opened on Jul 21, 2025

Requirement to detect account theft lacking notification of e-mail address or phone number change.

V7 (prev V3)

Status: Open.

#3219 In OWASP/ASVS;

· meetinthemiddle-be opened on Jul 18, 2025

Clarification: How ASVS requirements apply to Single Page Applications (SPA) architectures

V1 (prev V5)

Will be closed if no response/opposite arguments

Status: Open.

#3217 In OWASP/ASVS;

· ajayojha opened on Jul 14, 2025

Clarification: V1.2.7 “query parametrization” and “precompiled queries”

V1 (prev V5)

Status: Open.

#3213 In OWASP/ASVS;

· ajayojha opened on Jul 6, 2025

Clarification: V1.2.3 "encoding or escaping"

V1 (prev V5)

Status: Open.

#3212 In OWASP/ASVS;

· ajayojha opened on Jul 6, 2025

Clarification: V1.2.5 "Parameterized OS queries"

V1 (prev V5)

Status: Open.

#3211 In OWASP/ASVS;

· ajayojha opened on Jul 6, 2025

Clarification: V1.2.6 "or that specific security controls... have been implemented"

V1 (prev V5)

Status: Open.

#3210 In OWASP/ASVS;

· ajayojha opened on Jul 6, 2025

Clarification: V1.3.10 "sanitized before being processed"

Status: Open.

#3209 In OWASP/ASVS;

· ajayojha opened on Jul 6, 2025

Clarification: V1.3.9 "Sanitization for Memcache Injection Attacks"

V1 (prev V5)

Status: Open.

#3208 In OWASP/ASVS;

· ajayojha opened on Jun 28, 2025

Clarify that the scope is web applications in "Scope of the ASVS"

next meetingFilter for leadersFilter for leaders

Status: Open.

#3207 In OWASP/ASVS;

· randomstuff opened on Jun 25, 2025

Request for Clarification/Refinement: V1.1 "not stored in an encoded or escaped" Data Storage Principle

V1 (prev V5)

Status: Open.

#3206 In OWASP/ASVS;

· ajayojha opened on Jun 25, 2025