OWASP Top 10 · Question 9 of 12
Which categories are new in the OWASP Top 10:2025?
2 answers are correct. Medium
Show answer
Answer
- A Software Supply Chain Failures
- C Mishandling of Exceptional Conditions
Explanation
New are A03 Software Supply Chain Failures (an extension of the former "Vulnerable and Outdated Components") and A10 Mishandling of Exceptional Conditions. SSRF was a separate category in 2021 and became part of Broken Access Control in 2025.