Skip to content
Navigation Menu
Sign in
Products
Platform
GitHub
Repository hosting, code review, and collaboration
Copilot
AI coding agent for tasks, projects, and automated work
Build & Ship
Actions
CI/CD and automation
Code Quality
Quality analysis, fixes, and enforcement
Codespaces
Cloud development environments
Secure
Code Security
Vulnerability detection and remediation
Secret Protection
Secret scanning and leak prevention
All Features
Developers
Learn
Documentation
Training
Certifications
Build
Build with Copilot
Customize Copilot
Integrations
Explore
Trending repos
GitHub Sponsors
Developer articles
Changelog
Changelog
Your source for the latest features, improvements, and fixes across GitHub products, all in one place.
Businesses
By Stage
Enterprises
Team
Startups
Nonprofits
By Industry
Healthcare
Financial services
Manufacturing
Government
See all industries
Evaluate GitHub
Why GitHub
Customer Stories
Business insights
Trust Center
Add-ons
GitHub Advanced Security
Enterprise-grade code security
Copilot for business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Resources
Learn & Connect
Documentation
Resource center
Blog
Events & webinars
Community Forum
Customer Stories
Integrations
Support
Customer support
Training
GitHub Status
Company
About
Partners
Changelog
GitHub Universe
GitHub Universe
The event for developers, by developers — talks, workshops, and what’s next for GitHub.
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Back to milestones
v5.0 Release
New issue
Open
No due date
•
Last updated
Nov 5, 2026
A new release of the WSTG with new features completed.
77%
complete
Issues
Open
17
(17)
Closed
Adding section to address JavaScript Service Workers
new
OWASP/wstg#787
·
Filter by author
mmd103
opened
on Aug 19, 2021
·
v5.0 Release
19
Map WSTG to ASVS and determine coverage and possible knowledge gaps
integration
OWASP/wstg#261
·
Filter by author
RiieCco
opened
on Jan 20, 2020
·
v5.0 Release
30
Properly order document sections
blocked
revise
OWASP/wstg#253
·
Filter by author
victoriadrake
opened
on Jan 16, 2020
·
v5.0 Release
18
Update WSTG IDs after Merges
blocked
OWASP/wstg#510
·
Filter by author
ThunderSon
opened
on Jun 17, 2020
·
v5.0 Release
2
Should SSRF/LFI/RFI be relocated for v5?
help wanted
question
revise
OWASP/wstg#637
·
Filter by author
kingthorin
opened
on Nov 25, 2020
·
v5.0 Release
8
XSS Reorganization
enhancement
OWASP/wstg#591
·
Filter by author
ThunderSon
opened
on Oct 20, 2020
·
v5.0 Release
18
[Proposal] Add comprehensive testing guide for WebAssembly (Wasm)
new
OWASP/wstg#1483
·
Filter by author
Galaxy-sc
opened
on Aug 28, 2026
·
v5.0 Release
4
v5.0 Release
question
OWASP/wstg#1186
·
Filter by author
xb8
opened
on Feb 19, 2025
·
v5.0 Release
3
Cryptography - encryption vs signatures
revise
OWASP/wstg#734
·
Filter by author
JCapriotti
opened
on Apr 1, 2021
·
v5.0 Release
17
Draft Notes for v4.3/v5.0 Release
new
repo
work_in_progress
Task
OWASP/wstg#1393
·
Filter by author
kingthorin
opened
on Apr 5, 2026
·
v5.0 Release
3
Add WebAssembly Dynamic Analysis chapter (WSTG-WASM-03)
new
Unread
OWASP/wstg
#1567
·
Galaxy-sc
opened
Oct 14, 2026
·
Updated
Nov 3, 2026
29
feat: add WebAssembly Static Analysis chapter (WSTG-WASM-02)
new
Unread
OWASP/wstg
#1566
·
Galaxy-sc
opened
Oct 14, 2026
·
Updated
Nov 3, 2026
32
[Proposal] Updating Chapter 4 to cover vulnerabilities caused by AI web integrations
new
revise
Feature
OWASP/wstg#1606
·
Filter by author
Galaxy-sc
opened
on Nov 4, 2026
·
v5.0 Release
2
Add test for DOM Clobbering (WSTG-CLNT-16)
new
OWASP/wstg#1608
·
Filter by author
enesbaldemir
opened
on Nov 4, 2026
·
v5.0 Release
Add test for SAML authentication (WSTG-ATHN-12)
new
OWASP/wstg#1610
·
Filter by author
cvas22
opened
on Nov 4, 2026
·
v5.0 Release
Add test for Subresource Integrity and third-party script loading
new
OWASP/wstg#1611
·
Filter by author
cvas22
opened
on Nov 4, 2026
·
v5.0 Release
Add test for passkeys and WebAuthn authentication
new
OWASP/wstg#1612
·
Filter by author
cvas22
opened
on Nov 4, 2026
·
v5.0 Release
You can’t perform that action at this time.