Software & Data Integrity Failures
Unverified updates, insecure deserialization, and CI/CD or dependency tampering.
OWASP rank: 8
Practical checks
- Look for unsigned update mechanisms
- Test for insecure deserialization sinks
- Check SRI on third-party scripts
- Review CI/CD and dependency trust