OWASP API Security Top 10: What Changed from 2019 to 2023 and Reading Old Reports in Today's Terms
In the 2023 edition Excessive Data Exposure and Mass Assignment merged into BOPLA, API2, API4 and API9 were renamed, Injection and Logging left the list, and sensitive business flows, SSRF and unsafe consumption were added; so old findings are mapped by meaning, not by number. A mapping table, a small tool that translates old reports and shows unassessed categories, and what we'll do when a new edition arrives.
8 Nov 2026
·
11 min
·
5
