OWASP Top 10 Security Risks for 2025: JavaScript

ID Checker name
A1-2025: Broken Access Control
A2-2025: Security Misconfiguration
A3-2025: Software Supply Chain Failures
A4-2025: Cryptographic Failures
A5-2025: Injection

JS.BASE.NO.EVAL

A6-2025: Insecure Design
A7-2025: Authentication Failures
A8-2025: Software or Data Integrity Failures
A9-2025: Security Logging & Monitoring Failures
A10-2025: Mishandling of Exceptional Conditions