All pull requests

Pull requests

• Clarify sensitive versus public API keys in MASWE-0004

  #202·Diolor opened Oct 16, 2026Collaborator·

  ·
  10

• Update MASWE-0054 to count for risky devices

  #199·Diolor opened Sep 17, 2026Collaborator·

  ·
  2

• New devcontainer: MASWE

  #197·bernhste opened Sep 12, 2026Collaborator·

  ·
  1

• Add Example Attack Scenarios to Weaknesses

  #194·serek8 opened Aug 28, 2026Collaborator·1 of 2 tasks·

  ·
  1

  5

• Create MASWE-0120 for Sensitive Data Leaked via Outgoing Inter-App Communication

  #181·cpholguera opened Jun 23, 2026Collaborator·

  ·

• Fix typo in MASWE-0049.md

  #179·hucenxz opened Jun 9, 2026·3 of 6 tasks·

  ·

• MASWE-0064: Replace placeholder with complete Content Provider weakness entry

  #174·sushi2k with CopilotAI opened Apr 18, 2026·

  ·
  1

  7

  

• Define emulator detection weakness (MASWE-0099)

  #165·jacobocasado opened Dec 30, 2025Collaborator·

  ·
  1

• [MASWE-0112] Generalize title and alias for data handling

  #18·cpholguera opened Dec 4, 2025Collaborator·

  ·

• Revise MASWE-0005 to focus on hardcoded authenticators

  #17·cpholguera opened Dec 1, 2025Collaborator·

  ·

• New weaknesses regarding 3rd party libs

  #11·Diolor opened Sep 24, 2025Collaborator·

  ·
  12

  

• Add description for insecure deep links (MASWE-0058)

  #10·Diolor opened Sep 15, 2025Collaborator·

  ·
  1

  

• Add MASWE-0100 - Device Attestation

  #9·sushi2k opened Sep 10, 2025Collaborator·

  ·
  1

  6

• Fixes OWASP/mastg#2589 [MASWE-0025] Weak Signature

  #4·sydseter opened Jul 15, 2025Collaborator·

  ·
  1

  38

• Adds to OWASP/mastg#2588 [MASWE-0024] Weak Message Authentication Codes (MAC)

  #3·sydseter opened Jul 15, 2025Collaborator·

  ·
  27

• Fixes OWASP/mastg#2585 [MASWE-0021] Weak Hashing

  #2·sydseter opened Jul 15, 2025Collaborator·

  ·
  1

  31

• Fixes #2574 OWASP/mastg#2574 [MASWE-0010] Weak Cryptographic Key Derivation

  #1·sydseter opened Jul 15, 2025Collaborator·

  ·
  1

  3