-
Notifications
You must be signed in to change notification settings - Fork 4.6k
Pull requests: OWASP/CheatSheetSeries
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
Fix broken link details in PR comments
#2366
opened Aug 13, 2026 by
basriakkaya
Contributor
Loading…
Remove non-compiling Java LDAP escaping example
#2363
opened Aug 13, 2026 by
basriakkaya
Contributor
Loading…
Vulnerable Dependency Management: state what verifies a self-made patch in Case 3
#2360
opened Aug 12, 2026 by
amita-seal
Loading…
12 of 13 tasks
Vulnerable Dependency Management: add remediation and maintained backports to the Tools section
#2359
opened Aug 12, 2026 by
amita-seal
Loading…
12 of 13 tasks
Vulnerable Dependency Management: add Case 5 on backporting a published fix to a pinned version
#2358
opened Aug 12, 2026 by
amita-seal
Loading…
12 of 13 tasks
docs: fix run-on sentence in MFA Cheat Sheet SMS Cons section
#2351
opened Aug 11, 2026 by
krithikashree1957
Loading…
6 of 13 tasks
Add tables of important JWT fields
#2350
opened Aug 11, 2026 by
randomstuff
Collaborator
Loading…
5 of 13 tasks
Clarify PostgreSQL RLS and tenant isolation boundaries
#2349
opened Aug 10, 2026 by
jharvieux
Loading…
11 of 13 tasks
Cryptographic Storage: Update PHP function versions
#2341
opened Aug 7, 2026 by
GaryJones
Loading…
4 tasks done
docs: fix two typos in Key Management Cheat Sheet
#2340
opened Aug 7, 2026 by
krithikashree1957
Loading…
1 of 8 tasks
Add Verifying Third-Party Agent Execution Evidence Cheat Sheet
#2332
opened Aug 4, 2026 by
astrogilda
Loading…
9 of 13 tasks
docs(disclosure): clarify RFC 9116 required security.txt fields
#2328
opened Aug 3, 2026 by
felipeofdev-ai
Loading…
2 tasks
docs(CSP): note that prefetch-src was removed from CSP Level 3
#2327
opened Aug 3, 2026 by
felipeofdev-ai
Loading…
2 tasks
fix(HSTS): replace NBSP with ASCII spaces in header examples
#2326
opened Aug 3, 2026 by
felipeofdev-ai
Loading…
2 tasks
docs: improve key management guidance with ASVS 5.0 recommendations
#2322
opened Aug 1, 2026 by
rashim27us
Contributor
Loading…
6 of 13 tasks
Add Token Confidentiality and JWE section
#2321
opened Aug 1, 2026 by
shishir-cyber
Contributor
Loading…
8 of 13 tasks
Node.js cheat sheet: ESLint/JSHint are not SAST tools by default
#2319
opened Jul 31, 2026 by
ofri-peretz
Loading…
12 of 13 tasks
Authentication: clarify attacker models behind password blocklists
#2306
opened Jul 25, 2026 by
sujalavnelavai
Contributor
Loading…
1 of 13 tasks
Add MFA Attack Patterns and Mitigations with authoritative references
#2290
opened Jul 13, 2026 by
sujalavnelavai
Contributor
Loading…
1 of 13 tasks
Drone Security: add 2026 MAVLink CVE evidence + defense-in-depth guidance
#2284
opened Jul 10, 2026 by
AadarshNeupane
Loading…
4 tasks
docs: add FastAPI Security Cheat Sheet draft
#2281
opened Jul 9, 2026 by
jeffrey-theog06
Loading…
10 of 13 tasks
Add extension bypass examples and config file note to File Upload Cheat Sheet
#2267
opened Jun 30, 2026 by
Vishal-HaCkEr1910
Loading…
7 of 12 tasks
Improve Model-Based Guardrails in LLM Prompt Injection Prevention
#2249
opened Jun 23, 2026 by
crony-io
Loading…
8 of 13 tasks
Previous Next
ProTip!
Adding no:label will show everything without a label.