Skip to content

Issues: OWASP/ASVS

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

62 Open 1,519 Closed
62 Open 1,519 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

L2 MFA: Are we mandating "supported" or "required" 1) Discussion ongoing Issue is opened and assigned but no clear proposal yet V6 (prev V2) _5.0 - rc1
#2925 opened Apr 8, 2025 by tghosth
7
sync the usage of CSRF _5.0 - rc1
#2922 opened Apr 8, 2025 by elarlang
@elarlang
5.1.1 / v5.0.be-1.12.3 - documentation V5 (prev V12) Will be closed if no response/opposite arguments _5.0 - rc1
#2921 opened Apr 7, 2025 by jmanico
@tghosth
7
Fix up 4.3.3 / v5.0.be-13.7.3 1) Discussion ongoing Issue is opened and assigned but no clear proposal yet V4 (prev V13) _5.0 - rc1
#2914 opened Apr 7, 2025 by tghosth
10
Merge 11.8.* / v5.0.be-6.9.* to 11.1? 1) Discussion ongoing Issue is opened and assigned but no clear proposal yet V11 (prev V6) _5.0 - rc1
#2912 opened Apr 7, 2025 by elarlang
4
11.5.2 / v5.0.be-6.3.3 - define problem to solve V11 (prev V6) _5.0 - prep This needs to be addressed to prepare 5.0 _5.0 - rc1
#2911 opened Apr 7, 2025 by elarlang
4
V11 requirements 1) Discussion ongoing Issue is opened and assigned but no clear proposal yet V11 (prev V6) _5.0 - rc1
#2908 opened Apr 6, 2025 by elarlang
@danielcuthbert
2
V11 section texts 1) Discussion ongoing Issue is opened and assigned but no clear proposal yet V11 (prev V6) _5.0 - rc1
#2902 opened Apr 6, 2025 by elarlang
OAuth terminology - mTLS and Private Key JWT 1) Discussion ongoing Issue is opened and assigned but no clear proposal yet V10 (prev V51) Group issues related to OAuth _5.0 - rc1
#2897 opened Apr 6, 2025 by elarlang
@randomstuff @elarlang
6
V10 section texts 1) Discussion ongoing Issue is opened and assigned but no clear proposal yet V10 (prev V51) Group issues related to OAuth _5.0 - rc1
#2896 opened Apr 6, 2025 by elarlang
5
Terminology correction for OAuth and OIDC 6) PR awaiting review V10 (prev V51) Group issues related to OAuth _5.0 - rc1
#2894 opened Apr 6, 2025 by elarlang
1
@elarlang
3
V11.3.2 / v5.0.be-6.5.2 -- ciphers and modes 1) Discussion ongoing Issue is opened and assigned but no clear proposal yet V11 (prev V6) _5.0 - rc1
#2891 opened Apr 5, 2025 by oleksiidov
@randomstuff
8
Levels for password-related requirements 4a) Waiting for another This issue is waiting for another issue to be resolved levels V6 (prev V2) _5.0 - rc1
#2885 opened Apr 4, 2025 by elarlang
2
7.4.1 / v5.0.be-3.8.1 - session termination 2) Awaiting response Awaiting a response from the original poster V7 (prev V3) _5.0 - rc1
#2884 opened Apr 4, 2025 by elarlang
6
7.5.* / v5.0.be-3.7.* - re-authentication vs MFA 2) Awaiting response Awaiting a response from the original poster V7 (prev V3) V13 (prev V14) _5.0 - rc1
#2883 opened Apr 4, 2025 by elarlang
6
3.7.2 / v5.0.be-50.8.5 - needs update (and other redirect-related requirements) 2) Awaiting response Awaiting a response from the original poster V3 (prev V50) Group issues related to Web Frontend _5.0 - rc1
#2871 opened Apr 3, 2025 by elarlang
7
3.4.4 / v5.0.be-50.3.2 - xcto - meeds update 3) awaiting proposal There is some discussion in issue and reach to some results but it's not concluded with clear propos V3 (prev V50) Group issues related to Web Frontend _5.0 - rc1
#2870 opened Apr 3, 2025 by elarlang
@elarlang
2
3.4.3 / v5.0.be-50.3.1 - CSP for every HTTP response? 1) Discussion ongoing Issue is opened and assigned but no clear proposal yet V3 (prev V50) Group issues related to Web Frontend _5.0 - rc1
#2869 opened Apr 3, 2025 by elarlang
5
texts from 3rd person point of view _5.0 - draft This should be discussed once a 5.0 draft has been prepared.
#2802 opened Mar 27, 2025 by elarlang
v5.0.be-50.3.4 referer leakage 1) Discussion ongoing Issue is opened and assigned but no clear proposal yet next meeting Filter for leaders V3 (prev V50) Group issues related to Web Frontend _5.0 - rc1
#2789 opened Mar 26, 2025 by elarlang
55
[Task] recheck all references from chapters next meeting Filter for leaders _5.0 - draft This should be discussed once a 5.0 draft has been prepared.
#2783 opened Mar 25, 2025 by elarlang
Proposed requirement for CORP: V50.5.x 1) Discussion ongoing Issue is opened and assigned but no clear proposal yet 5) awaiting PR A proposal hs been accepted and reviewed and we are now waiting for a PR V3 (prev V50) Group issues related to Web Frontend _5.0 - rc1
#2767 opened Mar 24, 2025 by ryarmst
@elarlang
16
Proposed requirement for COOP: V50.1.x 1) Discussion ongoing Issue is opened and assigned but no clear proposal yet 2) Awaiting response Awaiting a response from the original poster V3 (prev V50) Group issues related to Web Frontend _5.0 - rc1
#2766 opened Mar 23, 2025 by ryarmst
@ryarmst
20
Chapter summaries 1) Discussion ongoing Issue is opened and assigned but no clear proposal yet _5.0 - draft This should be discussed once a 5.0 draft has been prepared.
#2688 opened Mar 13, 2025 by jmanico
4
ASVS v5.0 release checklist - rough workings _5.0 - draft This should be discussed once a 5.0 draft has been prepared.
#2555 opened Jan 29, 2025 by tghosth
5 of 23 tasks
4
ProTip! Follow long discussions with comments:>50.