Search results

V11.1.4 restates cryptographic inventory requirement already covered by V11.1.2

V11 (prev V6)

Status: Open.

#3345 In OWASP/ASVS;

· tghosth opened on Mar 5, 2026

V4.3.3-derived requirement accidentally deleted, mapping is stale

V13 (prev V14)

Status: Open.

#3344 In OWASP/ASVS;

· tghosth opened on Mar 5, 2026

Are 13.2.4 and 13.2.5 duplicates?

V13 (prev V14)

Status: Open.

#3343 In OWASP/ASVS;

· tghosth opened on Mar 5, 2026

Confirm that no change control tags need to be added yet.

Status: Open.

#3339 In OWASP/ASVS;

· tghosth opened on Feb 23, 2026

Phishing and/or visual deception protections

4) proposal for reviewIssue contains clear proposal for add/change somethingIssue contains clear proposal for add/change something

V1 (prev V5)

Status: Open.

#3338 In OWASP/ASVS;

· narfbg opened on Feb 22, 2026

Lower level requirement for 6.4.6

V6 (prev V2)

Status: Open.

#3337 In OWASP/ASVS;

· narfbg opened on Feb 22, 2026

Refine explanation of "sanitization"

4) proposal for reviewIssue contains clear proposal for add/change somethingIssue contains clear proposal for add/change something

V1 (prev V5)

Status: Open.

#3335 In OWASP/ASVS;

· tghosth opened on Feb 19, 2026

3.3.4, Require __Http- or __Host-Http- prefix for HttpOnly cookies when applicable

1) Discussion ongoingIssue is opened and assigned but no clear proposal yetIssue is opened and assigned but no clear proposal yet

V3 (prev V50)Group issues related to Web FrontendGroup issues related to Web Frontend

Status: Open.

#3331 In OWASP/ASVS;

· randomstuff opened on Feb 12, 2026

proposal 13.4.* Verify that source maps are disabled in production environments to prevent source code leakage.

4) proposal for reviewIssue contains clear proposal for add/change somethingIssue contains clear proposal for add/change something

requires change control

V13 (prev V14)

Status: Open.

#3326 In OWASP/ASVS;

· MozharAlhosni opened on Jan 26, 2026

Clarify CORS validation in 3.4.2 to explicitly reject 'null' origin

1) Discussion ongoingIssue is opened and assigned but no clear proposal yetIssue is opened and assigned but no clear proposal yet

V3 (prev V50)Group issues related to Web FrontendGroup issues related to Web Frontend

Status: Open.

#3322 In OWASP/ASVS;

· Galaxy-sc opened on Jan 5, 2026

Clarification request regarding ASVS 5.0 control scope

2) Awaiting responseAwaiting a response from the original posterAwaiting a response from the original poster

_5.0 - Not blockerThis issue does not block 5.0 so if it gets addressed then great, if not then fine.This issue does not block 5.0 so if it gets addressed then great, if not then fine.

Status: Open.

#3321 In OWASP/ASVS;

· paulobiao opened on Jan 4, 2026

Loss, Theft, Damage, and Compromise with regards to authenticators

2) Awaiting responseAwaiting a response from the original posterAwaiting a response from the original poster

V6 (prev V2)

Status: Open.

#3314 In OWASP/ASVS;

· sydseter opened on Dec 12, 2025