Skip to content

Issues: OWASP/www-project-top-10-for-large-language-model-applications

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

32 Open 68 Closed
32 Open 68 Closed
Author
Filter by author
Label
Filter by label
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Milestones
Filter by milestone
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Translation Effort - Language-specific links to other OWASP resources
#310 opened May 13, 2024 by phischde
@talesh
1
ads test from https://github.com/OWASP/www-project-top-10-for-large-language-model-applications/pull/292 diagram Issues related to the Top 10 diagram
#293 opened Apr 14, 2024 by GangGreenTemperTatum
12
Drive standard spelling from Terminology glossary
#291 opened Apr 13, 2024 by codingoutloud
@rossja @GangGreenTemperTatum
3
LLM-01 - Add canary tokens to Prevention and Mitigation Strategies
#288 opened Apr 12, 2024 by mhupfauer
7 tasks done
@leondz
1
setup automation for triage of issues against the project board
#285 opened Apr 11, 2024 by GangGreenTemperTatum
7 tasks done
@GangGreenTemperTatum
1
Extend LLM-04: RAG poisoning with glitch tokens causes DoS enhancement Changes/additions to the Top 10; eg. clarifications, examples, links to external resources, etc llm-04 Relates to LLM Top-10 entry #4
#283 opened Apr 10, 2024 by mhupfauer
13 tasks done
@kenhuangus
6
[suggestion enhancement] references of prompt injection -> jailbreaking, call out Many-Shot Jailbreaking explicitly
#281 opened Apr 3, 2024 by GangGreenTemperTatum
6 tasks done
@leondz
Migrate the current llmtop10.com site to OWASP apex and new hosting/solution enhancement Changes/additions to the Top 10; eg. clarifications, examples, links to external resources, etc extension Something that extends the Top 10; eg. cheat-sheets, guides, intentionally-vulnerable apps, etc website Indicates an issue specific to llmtop10.com
#280 opened Mar 30, 2024 by GangGreenTemperTatum
1 task done
@rossja @mkfnch @GangGreenTemperTatum
3
Updating Prompt's logo + others bug Factual inaccuracies, broken links, typos, etc website Indicates an issue specific to llmtop10.com
#277 opened Mar 21, 2024 by yael-ps
@mkfnch
4
Add CloudBorne and CloudJacking Attacks to LLM-05 Supply Chain - CVE-2023-4969 enhancement Changes/additions to the Top 10; eg. clarifications, examples, links to external resources, etc llm-05 Relates to LLM Top-10 entry #5
#264 opened Jan 18, 2024 by GangGreenTemperTatum
2 tasks
@virtualsteve-star
LLM03 - Numbering of Prevention and Mitigation Strategies in PDF does not match Markdown bug Factual inaccuracies, broken links, typos, etc llm-03 Relates to LLM Top-10 entry #3 pdf Indicates an issue specific to the PDF document
#259 opened Jan 3, 2024 by talesh
@rossja
LLM10 - Additional bullet point that doesn't exist in Markdown files bug Factual inaccuracies, broken links, typos, etc llm-10 Relates to LLM Top-10 entry #10 pdf Indicates an issue specific to the PDF document
#258 opened Jan 3, 2024 by talesh
@rossja
LLM05 - dead link bug Factual inaccuracies, broken links, typos, etc llm-05 Relates to LLM Top-10 entry #5 pdf Indicates an issue specific to the PDF document
#254 opened Dec 7, 2023 by IvanKusturic
@rossja
LLM03 - formatting and dead link bug Factual inaccuracies, broken links, typos, etc llm-03 Relates to LLM Top-10 entry #3 pdf Indicates an issue specific to the PDF document
#253 opened Dec 7, 2023 by IvanKusturic
@rossja
2
LLM-01: Adding example of Prompt injection in ReAct agents llm-01 Relates to LLM Top-10 entry #1
#246 opened Nov 11, 2023 by kyuz0
@leondz
2
Add the definitions to the documents/site enhancement Changes/additions to the Top 10; eg. clarifications, examples, links to external resources, etc
#244 opened Nov 8, 2023 by rossja
@rossja
1
Enhancement Suggestion: Enhance Diagram to Include LLM Architecture Types and Technologies diagram Issues related to the Top 10 diagram enhancement Changes/additions to the Top 10; eg. clarifications, examples, links to external resources, etc
#243 opened Nov 6, 2023 by GangGreenTemperTatum
@GangGreenTemperTatum
2
LLM07 - Insecure Plugin Design - Mitigation/How to Prevent Enhancements enhancement Changes/additions to the Top 10; eg. clarifications, examples, links to external resources, etc
#242 opened Nov 6, 2023 by GangGreenTemperTatum
@jsotiro
Create Threat Model and Discuss RAG with its security risks for LLM diagram Issues related to the Top 10 diagram discuss Indicates that this issue requires a deeper discussion v2 A topic for v2 discussion
#241 opened Nov 4, 2023 by jsotiro
@GangGreenTemperTatum
1
Enhancement Suggestion: Add RAG to the main diagram diagram Issues related to the Top 10 diagram enhancement Changes/additions to the Top 10; eg. clarifications, examples, links to external resources, etc
#240 opened Nov 4, 2023 by jsotiro
@Bobsimonoff
14
Enhance the OWASP LLM Applications Project with a Related Patterns Functionality enhancement Changes/additions to the Top 10; eg. clarifications, examples, links to external resources, etc extension Something that extends the Top 10; eg. cheat-sheets, guides, intentionally-vulnerable apps, etc
#230 opened Oct 25, 2023 by GangGreenTemperTatum
@GangGreenTemperTatum
2
Merge summary file into the Vulnerabilities files enhancement Changes/additions to the Top 10; eg. clarifications, examples, links to external resources, etc
#225 opened Oct 21, 2023 by Bobsimonoff
@rossja
5
Enhancement Suggestion: Map CWE's for Each Risk/Vulnerability LLM-01->LLM->10 diagram Issues related to the Top 10 diagram v2 A topic for v2 discussion
#224 opened Oct 18, 2023 by GangGreenTemperTatum
@virtualsteve-star @GangGreenTemperTatum @emmanuelgjr
1
template for example attack scenarios change for consistency llm-other Relates to a topic that is not (yet) covered by the Top 10
#200 opened Sep 30, 2023 by Bobsimonoff
@rossja
2
Overreliance: Prevention could include Human in the loop llm-09 Relates to LLM Top-10 entry #9
#199 opened Sep 30, 2023 by Bobsimonoff
@virtualsteve-star
1
ProTip! Exclude everything labeled bug with -label:bug.