owasp
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 76 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 25, 2006 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →OWASP DefectDojo API/Web serializers.py UserSerializer privileges management
ModSecurity: Multipart form-data parser silently strips embedded line breaks from form-field values, enabling request-body inspection bypass
ModSecurity: Transformation utf8toUnicode produces wrong output on i386 architecture
ModSecurity: Unsigned integer underflow in @verifySSN / @verifyCPF / @verifySVNR operators
OWASP BLT: pre-commit-fix.yaml executes untrusted fork code via pull_request_target
libModSecurity3 denial of service via segfault when using t:hexDecode on single-character query strings
OWAP DefectDojo Benchmark/Engagement/Product/Survey authorization
Monitor owasp in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.