All issues

Search results

[C9.2] An approval survives a change to the content it was granted against, and 10.4.8 has this control only for MCP

Status: Open.

#1126 In OWASP/AISVS;

· Mayur021 opened on Aug 21, 2026

C9.2.10: "the chain" is undefined, so the requirement cannot be assessed as written

Status: Open.

#1123 In OWASP/AISVS;

· Mayur021 opened on Aug 4, 2026

C2.1: locale-dependent lowercasing is conformant yet bypassable — add locale-independent case folding, confusable-skeleton, and per-language measurement

after 1.01

blockedWaiting for something to happen elsewhereWaiting for something to happen elsewhere

Status: Open.

#1122 In OWASP/AISVS;

· fevziegeyurtsevenler opened on Jul 30, 2026

[v1.01][C8.2] Require complete mediation of trusted-memory writes and prevent rejected-candidate propagation

Status: Open.

#1120 In OWASP/AISVS;

· visker83-del opened on Jul 27, 2026

[C10.4] Granted MCP server authorization is not bound to the server's connection endpoint

Status: Open.

#1119 In OWASP/AISVS;

· aminekhazraj opened on Jul 25, 2026

Add security controls for caller-supplied generation parameters

Status: Open.

#1116 In OWASP/AISVS;

· ImanSharaf opened on Jul 16, 2026

Update to the 1.0 research directory

Status: Open.

#1109 In OWASP/AISVS;

· jmanico opened on Jul 14, 2026

AI Incident Response

after 1.0Issues we wish to hold off on until after 1.0 is released.Issues we wish to hold off on until after 1.0 is released.

Status: Open.

#1083 In OWASP/AISVS;

· ottosulin opened on Jun 23, 2026

MCP spec update 2026-07-28

after 1.0Issues we wish to hold off on until after 1.0 is released.Issues we wish to hold off on until after 1.0 is released.

Status: Open.

#823 In OWASP/AISVS;

· ottosulin opened on May 26, 2026