OWASP Top TEN

1. Broken Access Control (A01:2021)

2. Cryptographic Failures (A02:2021)

3. Injection (A03:2021)

4. Insecure Design (A04:2021)

5. Security Misconfiguration (A05:2021)

6. Vulnerable and Outdated Components (A06:2021)

7. Identification and Authentication Failures (A07:2021)

8. Software and Data Integrity Failures (A08:2021)

9. Security Logging and Monitoring Failures (A09:2021)

10. Server-Side Request Forgery (SSRF) (A10:2021)