Issues

• Repudiation & Untraceability: was this deliberately excluded from Sprint 1?

  OWASP/www-project-top-10-for-large-language-model-applications#870 · Filter by author elang2 opened on Aug 17, 2026
  2

• ASI07 (Insecure Inter-Agent Communication): offer to author the Sprint 1 entry — is the slot open?

  OWASP/www-project-top-10-for-large-language-model-applications#866 · Filter by author ossumpossum opened on Aug 5, 2026
  1

• SemGuard: Open-Source Explainable Gateway for Multilingual LLM Threat Detection (Arabic/Arabizi) — LLM01, LLM02

  OWASP/www-project-top-10-for-large-language-model-applications#862 · Filter by author AbdaullahAG opened on Aug 1, 2026

• Prevalence data for LLM01 prompt injection, a measurement of hidden agent directed text across 4,991 websites

  OWASP/www-project-top-10-for-large-language-model-applications#855 · Filter by author asish-singh opened on Jul 14, 2026
  7

• Proposal: Deterministic Isomorphism Architecture (DIA) Runtime Schema Artifact for BBIS Enforcement

  OWASP/www-project-top-10-for-large-language-model-applications#845 · Filter by author Queballsharkensdad opened on Jun 23, 2026
  7

• OWASP LLM Top 10 v2.0 Draft Comment: Evaluation Framework + Defense Findings from Agent Security Sandbox

  OWASP/www-project-top-10-for-large-language-model-applications#844 · Filter by author TGKDre opened on Jun 17, 2026
  1

• Reference Implementation Submission: Agent Trust Bench, live adversarial payment-flow test corpus (OWASP LLM Top 10 aligned)

  OWASP/www-project-top-10-for-large-language-model-applications#839 · Filter by author chopmob-cloud opened on May 30, 2026
  1

• Request: Add MCP (Model Context Protocol) Attack Category to OWASP LLM Top 10

  OWASP/www-project-top-10-for-large-language-model-applications#836 · Filter by author SyedAnas01 opened on May 22, 2026
  1

• 🚨 [BUG] - Pages 39 to 41 are completely malformed in the PDF assets (OWASP-Top-10-for-LLMs-v2025.pdf)

  bug
  OWASP/www-project-top-10-for-large-language-model-applications#834 · Filter by author Vincent-Stragier opened on May 22, 2026
  2

• 💡 [REQUEST] - [LLM01] Add Bulwark — open-source defense framework with prompt-injection detection, RBAC, and audit

  OWASP/www-project-top-10-for-large-language-model-applications#830 · Filter by author anilatambharii opened on May 3, 2026

• Proposal: OWASP Top 10 for AI-Generated Code (AGC)

  OWASP/www-project-top-10-for-large-language-model-applications#826 · Filter by author razashariff opened on Apr 17, 2026
  1

• Reference Implementation Submission: AASTF — Agentic AI Security Testing Framework

  OWASP/www-project-top-10-for-large-language-model-applications#825 · Filter by author anonymousAAK opened on Apr 15, 2026

• Proposal: Boundary-to-Boundary Invariant Survival for Agentic Execution Governance

  OWASP/www-project-top-10-for-large-language-model-applications#817 · Filter by author QueBallSharken opened on Apr 6, 2026
  38

• Proposal: LLM11 - Observation Framing Attack (OFA)

  OWASP/www-project-top-10-for-large-language-model-applications#813 · Filter by author NoDataFound opened on Mar 30, 2026
  6

• Agent Passport System: cryptographic enforcement layer for ASI-03, ASI-07, ASI-08, ASI-10

  OWASP/www-project-top-10-for-large-language-model-applications#812 · Filter by author aeoess opened on Mar 27, 2026
  12

• Case Study: Agent Memory Chain Attack - Persistent Code Execution via Prompt Injection in Autonomous Agents

  OWASP/www-project-top-10-for-large-language-model-applications#811 · Filter by author Preventnetworkhacking opened on Mar 26, 2026
  1

• Proposed New Category: Postural Manipulation — Semantically Benign Behavioral Orientation Attack

  OWASP/www-project-top-10-for-large-language-model-applications#807 · Filter by author adavidson510 opened on Mar 18, 2026
  23

• MCP attack mechanics missing from LLM01 and LLM06: five lab-confirmed patterns not currently documented

  OWASP/www-project-top-10-for-large-language-model-applications#806 · Filter by author aminrj opened on Mar 17, 2026
  4

• mcps-audit: Free OWASP Agentic AI Top 10 scanner for MCP servers and AI agents

  OWASP/www-project-top-10-for-large-language-model-applications#805 · Filter by author razashariff opened on Mar 15, 2026

• Runtime Enforcement Mapping for OWASP Agentic Top 10 (ASI01–ASI10)

  OWASP/www-project-top-10-for-large-language-model-applications#802 · Filter by author narendrakumarnutalapati opened on Mar 5, 2026
  257

• Independent authorization-layer framework mapping against ASI03, ASI05, and ASI02 — possible community resource

  OWASP/www-project-top-10-for-large-language-model-applications#800 · Filter by author richard-porter opened on Feb 19, 2026
  37

• typos

  bug
  OWASP/www-project-top-10-for-large-language-model-applications#789 · Filter by author carolanitz opened on Jan 3, 2026
  1

  

• Proposal to Include New LLM Attack Techniques in OWASP Top 10

  OWASP/www-project-top-10-for-large-language-model-applications#767 · Filter by author zkill38338 opened on Nov 26, 2025
  3

• 🚨 [Question] - Arrow in them《Securing Agentic Applications Guide 1.0》

  bug
  OWASP/www-project-top-10-for-large-language-model-applications#702 · Filter by author hanhuiwen opened on Aug 19, 2025
  5

  

• [suggestion enhancement] references of prompt injection -> jailbreaking, call out Many-Shot Jailbreaking explicitly

  OWASP/www-project-top-10-for-large-language-model-applications#281 · Filter by author GangGreenTemperTatum opened on Apr 3, 2024
  1