LLM05: refresh reference links for 2026#4
Merged
rocklambros merged 1 commit intoGenAI-Security-Project:mainfrom May 2, 2026
Merged
Conversation
RicoKomenda
requested review from
rocklambros,
rossja and
virtualsteve-star
as code owners
Replace four outdated 2022-2023 references with current material: - EchoLeak (CVE-2025-32711, CVSS 9.3): zero-click exfiltration in M365 Copilot - LangGrinch (CVE-2025-68664, CVSS 9.3): LangChain serialization injection - PortSwigger hands-on lab: exploiting insecure output handling in LLMs - GitHub Copilot RCE via prompt injection (Embrace The Red, 2025) Add new references: - OWASP AISVS C7: Model Behavior, Output Control and Safety Assurance - CWE-116: Improper Encoding or Escaping of Output Remove: CVE-2019-20634, vague Snyk/LangChain post, 2023 ChatGPT plugin post, 2023 Markdown exfil post, AI-hallucinates-packages post. Also fix: heading year (2025 -> 2026), section name (Common Examples of Vulnerability -> Common Examples of Risk per template), ASVS publisher label typo (AASVS -> ASVS).
RicoKomenda
force-pushed
the
upgrade/LLM05-refresh-references
branch
from
7f31af8 to
5282406
Compare
rocklambros
approved these changes
May 2, 2026
Collaborator
rocklambros
left a comment
rocklambros
left a comment
There was a problem hiding this comment.
Approving — conformance check passes against documentation/style/{README,general,entries}.md:
- Renames
### Common Examples of Vulnerabilityto### Common Examples of Risk(aligns with template's required section name) - All updated references use the documented
[Title](URL): **Publisher**format - US English, ATX headings, no level skips
Merging per project owner @rocklambros's instruction since you are the LLM05 entry lead — your authorship is the merge gate.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
:2025->:2026) and section name (Common Examples of Vulnerability->Common Examples of Riskper_template.md)OWASP ASVSpublisher label typo (AASVS->ASVS)Replaced references:
Added references: