OWASP Cheat Sheet Series update

https://cheatsheetseries.owasp.org/OWASP Cheat Sheet Series update2026-03-13T16:21:32+00:00Core teamdominique.righetto@owasp.orgpython-feedgenhttps://cheatsheetseries.owasp.org/gitbook/images/favicon.icoList of the last updates on the contenthttps://github.com/OWASP/CheatSheetSeries/pull/1889Update Clickjacking_defense_cheatsheet2025-11-14T14:18:42+00:002025-11-14T14:18:42+00:00https://github.com/OWASP/CheatSheetSeries/pull/1890Update Database_Security_Cheat_Sheet.md2025-11-13T16:10:26+00:002025-11-13T16:10:26+00:00https://github.com/OWASP/CheatSheetSeries/pull/1893Update FIPS 140-2 compliance references to include 140-32025-11-18T11:53:05+00:002025-11-18T11:53:05+00:00https://github.com/OWASP/CheatSheetSeries/pull/1896Update Kubernetes_Security_Cheat_Sheet.md2025-11-17T23:51:23+00:002025-11-17T23:51:23+00:00https://github.com/OWASP/CheatSheetSeries/pull/1897Update Zero_Trust_Architecture_Cheat_Sheet.md2025-11-18T11:51:24+00:002025-11-18T11:51:24+00:00https://github.com/OWASP/CheatSheetSeries/pull/1898Update Docker_Security_Cheat_Sheet.md2025-11-18T11:52:15+00:002025-11-18T11:52:15+00:00https://github.com/OWASP/CheatSheetSeries/pull/1899Update: Drone Security - Add System integrity2025-11-19T02:50:00+00:002025-11-19T02:50:00+00:00https://github.com/OWASP/CheatSheetSeries/pull/1901Fix lxml build error by installing system dependencies2025-11-19T02:56:49+00:002025-11-19T02:56:49+00:00https://github.com/OWASP/CheatSheetSeries/pull/1902Update XML_External_Entity_Prevention_Cheat_Sheet.md2025-12-15T15:13:27+00:002025-12-15T15:13:27+00:00https://github.com/OWASP/CheatSheetSeries/pull/1903Update AJAX_Security_Cheat_Sheet.md2025-11-19T17:05:36+00:002025-11-19T17:05:36+00:00https://github.com/OWASP/CheatSheetSeries/pull/1905typo: inform that Content-Type is a mime type, not the example value2025-11-24T14:38:32+00:002025-11-24T14:38:32+00:00https://github.com/OWASP/CheatSheetSeries/pull/1908Update LLM_Prompt_Injection_Prevention_Cheat_Sheet.md2025-12-03T06:31:00+00:002025-12-03T06:31:00+00:00https://github.com/OWASP/CheatSheetSeries/pull/1909Update OWASP backronym: Web -> Worldwide2025-12-01T14:23:17+00:002025-12-01T14:23:17+00:00https://github.com/OWASP/CheatSheetSeries/pull/1910SSRF: Update the Semgrep rules section2025-12-03T06:38:09+00:002025-12-03T06:38:09+00:00https://github.com/OWASP/CheatSheetSeries/pull/1913Update links in Threat Modeling cheat sheet2025-12-03T06:22:25+00:002025-12-03T06:22:25+00:00https://github.com/OWASP/CheatSheetSeries/pull/1914Fix punctuation/typos/grammar in Secrets Management Cheat Sheet2025-12-05T23:06:49+00:002025-12-05T23:06:49+00:00https://github.com/OWASP/CheatSheetSeries/pull/1915Update: Authentication Cheat Sheet2025-12-10T21:23:49+00:002025-12-10T21:23:49+00:00https://github.com/OWASP/CheatSheetSeries/pull/1916Bump urllib3 from 2.5.0 to 2.6.0 in the pip group across 1 directory2025-12-08T14:29:49+00:002025-12-08T14:29:49+00:00https://github.com/OWASP/CheatSheetSeries/pull/1917Fix visual prompt injection research link in LLM Prompt Injection Pre…2025-12-08T14:30:12+00:002025-12-08T14:30:12+00:00https://github.com/OWASP/CheatSheetSeries/pull/1921Update: Credential Stuffing Prevention Cheat Sheet2025-12-10T15:12:56+00:002025-12-10T15:12:56+00:00https://github.com/OWASP/CheatSheetSeries/pull/1923Update Browser_Extension_Vulnerabilities_Cheat_Sheet.md2025-12-15T13:45:52+00:002025-12-15T13:45:52+00:00https://github.com/OWASP/CheatSheetSeries/pull/1926New Cheat sheet: AI_Agent_Security_Cheat_Sheet.md2025-12-17T09:48:01+00:002025-12-17T09:48:01+00:00https://github.com/OWASP/CheatSheetSeries/pull/1927Update: Table of Contents for CSRF Cheat Sheet #18922025-12-15T15:11:06+00:002025-12-15T15:11:06+00:00https://github.com/OWASP/CheatSheetSeries/pull/1929provide guidance on use of AI2025-12-17T09:44:16+00:002025-12-17T09:44:16+00:00https://github.com/OWASP/CheatSheetSeries/pull/1932Update: Multifactor Authentication - OTP Handling and Storage2025-12-19T15:13:06+00:002025-12-19T15:13:06+00:00https://github.com/OWASP/CheatSheetSeries/pull/1933Bump pymdown-extensions from 10.12 to 10.16.1 in the pip group across 1 directory2025-12-17T09:49:11+00:002025-12-17T09:49:11+00:00https://github.com/OWASP/CheatSheetSeries/pull/1934Minor Typo fix in Forgot Password Cheat Sheet.2025-12-19T12:42:33+00:002025-12-19T12:42:33+00:00https://github.com/OWASP/CheatSheetSeries/pull/1935Revert "Update: Table of Contents for CSRF Cheat Sheet #1892 (#1927)"2025-12-24T16:08:24+00:002025-12-24T16:08:24+00:00https://github.com/OWASP/CheatSheetSeries/pull/1938REST Cheat Sheet: Prevent out-of-order API execution2025-12-31T19:50:32+00:002025-12-31T19:50:32+00:00https://github.com/OWASP/CheatSheetSeries/pull/1940FIX Update link to Anthropic's mitigation strategies2025-12-30T18:18:16+00:002025-12-30T18:18:16+00:00https://github.com/OWASP/CheatSheetSeries/pull/1941Fix HTTPS REST reference in REST Security Cheat Sheet2025-12-30T18:17:28+00:002025-12-30T18:17:28+00:00https://github.com/OWASP/CheatSheetSeries/pull/1942Create Multi_Tenant_Security_Cheat_Sheet.md2026-01-05T09:21:34+00:002026-01-05T09:21:34+00:00https://github.com/OWASP/CheatSheetSeries/pull/1943Add C#/.NET implementation to Logging Vocabulary implementation section2026-01-05T09:19:35+00:002026-01-05T09:19:35+00:00https://github.com/OWASP/CheatSheetSeries/pull/1944fix #1885: Double-submit cookie - header/param ONLY (cookies INSECURE)2026-01-05T08:58:25+00:002026-01-05T08:58:25+00:00https://github.com/OWASP/CheatSheetSeries/pull/1946fix #1784: SSRF deny-list (last resort)2026-01-05T09:04:29+00:002026-01-05T09:04:29+00:00https://github.com/OWASP/CheatSheetSeries/pull/1948docs: use HTTPS for external references where supported2026-01-05T14:07:26+00:002026-01-05T14:07:26+00:00https://github.com/OWASP/CheatSheetSeries/pull/1950Fix bad closing code fence for X-Robots-Tag in HTTP Headers cheatsheet2026-01-07T19:22:19+00:002026-01-07T19:22:19+00:00https://github.com/OWASP/CheatSheetSeries/pull/1954Bump urllib3 from 2.6.0 to 2.6.3 in the pip group across 1 directory2026-01-08T16:38:23+00:002026-01-08T16:38:23+00:00https://github.com/OWASP/CheatSheetSeries/pull/1956Docs: Fix code indentation levels2026-01-21T10:29:35+00:002026-01-21T10:29:35+00:00https://github.com/OWASP/CheatSheetSeries/pull/1957docs: use HTTPS for Acros Security session fixation reference2026-01-13T15:00:57+00:002026-01-13T15:00:57+00:00https://github.com/OWASP/CheatSheetSeries/pull/1966docs: use HTTPS for IETF Draft reference2026-01-15T06:10:24+00:002026-01-15T06:10:24+00:00https://github.com/OWASP/CheatSheetSeries/pull/1967docs: use HTTPS for DMalloc reference2026-01-15T06:10:51+00:002026-01-15T06:10:51+00:00https://github.com/OWASP/CheatSheetSeries/pull/1968docs: use HTTPS for XACML specification reference2026-01-15T06:11:13+00:002026-01-15T06:11:13+00:00https://github.com/OWASP/CheatSheetSeries/pull/1970Remove references to unsupported or outdated third-party security tools2026-01-13T14:05:19+00:002026-01-13T14:05:19+00:00https://github.com/OWASP/CheatSheetSeries/pull/1977Docs fix broken internal link in index.md2026-01-21T10:11:42+00:002026-01-21T10:11:42+00:00https://github.com/OWASP/CheatSheetSeries/pull/1978Docs/http headers clarity2026-02-27T11:14:39+00:002026-02-27T11:14:39+00:00https://github.com/OWASP/CheatSheetSeries/pull/1987PR fixes Issue #1127 related to capturing malicious SQLi payloads2026-02-04T15:29:23+00:002026-02-04T15:29:23+00:00https://github.com/OWASP/CheatSheetSeries/pull/1991Integrate PoP Mechanism under OAuth 2.02026-03-06T05:23:08+00:002026-03-06T05:23:08+00:00https://github.com/OWASP/CheatSheetSeries/pull/1993Clarify password hashing rationale and algorithm selection2026-02-27T12:01:46+00:002026-02-27T12:01:46+00:00https://github.com/OWASP/CheatSheetSeries/pull/1996Fix broken reference links in XS_Leaks_Cheat_Sheet.md2026-02-05T15:35:08+00:002026-02-05T15:35:08+00:00https://github.com/OWASP/CheatSheetSeries/pull/1998Fix broken Code of Conduct link in CONTRIBUTING.md2026-02-06T17:29:52+00:002026-02-06T17:29:52+00:00https://github.com/OWASP/CheatSheetSeries/pull/2002Update scrypt section wording in Password_Storage_Cheat_Sheet.md for …2026-02-27T12:04:20+00:002026-02-27T12:04:20+00:00https://github.com/OWASP/CheatSheetSeries/pull/2005New Cheat Sheet: MCP_Security_Cheat_Sheet.md2026-03-02T19:23:25+00:002026-03-02T19:23:25+00:00https://github.com/OWASP/CheatSheetSeries/pull/2006Fix #1901: Install system dependencies for lxml in workflow and Docker2026-02-27T12:15:12+00:002026-02-27T12:15:12+00:00https://github.com/OWASP/CheatSheetSeries/pull/2007fixing typo2026-02-17T14:50:03+00:002026-02-17T14:50:03+00:00https://github.com/OWASP/CheatSheetSeries/pull/2009Update Web Content Caching section with Clear-Site-Data2026-02-27T12:07:57+00:002026-02-27T12:07:57+00:00https://github.com/OWASP/CheatSheetSeries/pull/2012Clarify Apache Header always vs onsuccess behavior to prevent duplication (#2008)2026-02-27T10:59:01+00:002026-02-27T10:59:01+00:00https://github.com/OWASP/CheatSheetSeries/pull/2016Clarify salt handling wording for Argon2id in Password Storage Cheat Sheet2026-02-18T16:05:46+00:002026-02-18T16:05:46+00:00https://github.com/OWASP/CheatSheetSeries/pull/2017Update AJAX_Security_Cheat_Sheet.md2026-02-27T11:06:19+00:002026-02-27T11:06:19+00:00https://github.com/OWASP/CheatSheetSeries/pull/2026Fix typo in Shared Responsibility Model section2026-02-25T16:05:57+00:002026-02-25T16:05:57+00:00https://github.com/OWASP/CheatSheetSeries/pull/2032Fix heading capitalization and typo in SQL Injection Prevention Cheat Sheet2026-02-26T16:02:22+00:002026-02-26T16:02:22+00:00https://github.com/OWASP/CheatSheetSeries/pull/2033Update Secure_AI_Model_Ops_Cheat_Sheet (issue 2029)2026-02-26T20:03:29+00:002026-02-26T20:03:29+00:00https://github.com/OWASP/CheatSheetSeries/pull/2034Updated Section 7 Adversarial Robustness 2026-02-27T10:45:58+00:002026-02-27T10:45:58+00:00https://github.com/OWASP/CheatSheetSeries/pull/2035Asvs5 index - fixes issue #17562026-02-27T17:04:25+00:002026-02-27T17:04:25+00:00https://github.com/OWASP/CheatSheetSeries/pull/2036Fix 4042026-02-27T17:34:23+00:002026-02-27T17:34:23+00:00https://github.com/OWASP/CheatSheetSeries/pull/2039Updated HSTS values across the guide for consistency2026-03-03T08:14:42+00:002026-03-03T08:14:42+00:00https://github.com/OWASP/CheatSheetSeries/pull/2040Update WebSocket_Security_Cheat_Sheet by adding protections against message replay attacks2026-03-02T13:12:38+00:002026-03-02T13:12:38+00:00https://github.com/OWASP/CheatSheetSeries/pull/2047Remove link to the now removed ASVS 4.0 index2026-03-03T12:49:59+00:002026-03-03T12:49:59+00:00