Issues

• [Proposal] Add comprehensive testing guide for WebAssembly (Wasm)

  new
  OWASP/wstg#1483 · Filter by author Galaxy-sc opened on Aug 28, 2026 · v5.0 Release
  1

  

• Draft Notes for v4.3/v5.0 Release

  newrepowork_in_progress
  Task

  OWASP/wstg#1393 · Filter by author kingthorin opened on Apr 5, 2026 · v5.0 Release
  3

  

• [Suggestion] 4.7.21 Testing for Parameter Input Handling

  enhancement
  OWASP/wstg#1221 · Filter by author websecnl opened on Jul 4, 2025 · v5.0 Release
  8

  

• v5.0 Release

  question
  OWASP/wstg#1186 · Filter by author xb8 opened on Feb 19, 2025 · v5.0 Release
  3

• Adding Test for Outdated and Unsupported Components

  enhancementrevise
  OWASP/wstg#1017 · Filter by author cyspad opened on Jan 7, 2023 · v5.0 Release
  22

  

• Review and update content about SameSite cookies

  revise
  OWASP/wstg#1005 · Filter by author rbsec opened on Dec 27, 2022 · v5.0 Release
  8

  

• Adding file producer metadata leakage

  revise
  OWASP/wstg#788 · Filter by author Hipapheralkus opened on Aug 26, 2021 · v5.0 Release
  4

  

• Adding section to address JavaScript Service Workers

  new
  OWASP/wstg#787 · Filter by author mmd103 opened on Aug 19, 2021 · v5.0 Release
  15

  

• Cryptography - encryption vs signatures

  revise
  OWASP/wstg#734 · Filter by author JCapriotti opened on Apr 1, 2021 · v5.0 Release
  17

  

• Add a section for checking if the web application properly hashes passwords before storing them in the backend.

  new
  OWASP/wstg#728 · Filter by author pinkLagoon opened on Mar 17, 2021 · v5.0 Release
  12

• Enhance WSTG-BUSL-09 - Upload of Malicious Files

  revise
  OWASP/wstg#705 · Filter by author DotDotSlashRepo opened on Jan 2, 2021 · v5.0 Release
  7

  

• Checklists and Merged IDs

  bugreporevise
  OWASP/wstg#640 · Filter by author ThunderSon opened on Nov 26, 2020 · v5.0 Release
  20

  

• Should SSRF/LFI/RFI be relocated for v5?

  help wantedquestionrevise
  OWASP/wstg#637 · Filter by author kingthorin opened on Nov 25, 2020 · v5.0 Release
  8

• Merge of Sensitive Information and Credentials Transport in Clear Text

  enhancement
  OWASP/wstg#598 · Filter by author ThunderSon opened on Oct 20, 2020 · v5.0 Release
  9

• XSS Reorganization

  enhancement
  OWASP/wstg#591 · Filter by author ThunderSon opened on Oct 20, 2020 · v5.0 Release
  18

  

• Hackerone and Bugcrowd Links

  enhancementhelp wanted
  OWASP/wstg#535 · Filter by author ThunderSon opened on Aug 4, 2020 · v5.0 Release
  19

• Update WSTG IDs after Merges

  blocked
  OWASP/wstg#510 · Filter by author ThunderSon opened on Jun 17, 2020 · v5.0 Release
  2

• Map WSTG to ASVS and determine coverage and possible knowledge gaps

  integration
  OWASP/wstg#261 · Filter by author RiieCco opened on Jan 20, 2020 · v5.0 Release
  30

  

• Properly order document sections

  blockedrevise
  OWASP/wstg#253 · Filter by author victoriadrake opened on Jan 16, 2020 · v5.0 Release
  18

• Add Testing Integrating / Third Party Services (OTG-CONFIG-011)

  good first issuenew
  OWASP/wstg#14 · Filter by author tolo7010 opened on Jan 29, 2018 · v5.0 Release
  21

  

• Adapt guide to be inclusive of API testing

  APIgood first issuenewrevise
  OWASP/wstg#5 · Filter by author itscooper opened on Jun 15, 2017 · v5.0 Release
  15