Releases: OWASP/cornucopia
Latest pre-release
OWASP Cornucopia Pre-Release
This is an automated pre-release build from the latest master branch.
Translation Check Report
The following sentences/tags have issues in the translations:
Spanish
File: eop-cards-5.0-es.yaml
Untranslated Tags
The following tags have identical text to English (not translated):
T00105, T00140
Russian
File: eop-cards-5.0-ru.yaml
Untranslated Tags
The following tags have identical text to English (not translated):
T00001, T00003, T00004, T00090, T00100, T00105, T00210, T00220, T00230, T00240, T00250, T00260, T00270, T00280, T00290, T00300, T00310, T00320, T00330, T00340, T00350, T00360, T00370, T00380, T00390, T00400, T00410, T00420, T00430, T00440, T00450, T00460, T00470, T00480
Russian
File: mobileapp-cards-1.0-ru.yaml
Untranslated Tags
The following tags have identical text to English (not translated):
T00020, T00120, T00130, T00220, T00240, T00310, T00311, T00320, T00330, T00340, T00350, T00360, T00370, T00380, T00390, T00400, T00510, T00520, T00530, T00610, T01010, T01070, T01160, T01170, T01180, T01200, T01210, T01220, T01301, T01411, T02680, T02690, T02700, T02710, T02720, T02730, T02780, T03010
Russian
File: mobileapp-cards-1.1-ru.yaml
Untranslated Tags
The following tags have identical text to English (not translated):
T00020, T00120, T00130, T00220, T00240, T00310, T00311, T00320, T00330, T00340, T00350, T00360, T00370, T00380, T00390, T00400, T00510, T00520, T00530, T00610, T01010, T01070, T01160, T01170, T01180, T01200, T01210, T01220, T01301, T01411, T02680, T02690, T02700, T02710, T02720, T02730, T02780, T03010
Spanish
File: webapp-cards-2.2-es.yaml
Missing Tags
The following tags are present in the English version but missing in this translation:
T01411
Untranslated Tags
The following tags have identical text to English (not translated):
T00020, T00030, T00380, T01590, T02330, T02530, T02940, T03140, T03160, T03180, T03200, T03210, T03220, T03230, T03240, T03250, T03260, T03270, T03280, T03290, T03300, T03310, T03320, T03330, T03340, T03350, T03360, T03370, T03380, T03390, T03400, T03410, T03420, T03430, T03440, T03450, T03460, T03470, T03480, T03490, T03500, T03510, T03520, T03530, T03540, T03550, T03560, T03570, T03580, T03590, T03600, T03610, T03620, T03630, T03640, T03650, T03660, T03670, T03680, T03690, T03700, T03710, T03720, T03730, T03750, T03770, T03771, T03772, T03773, T03774, T03775, T03800, T03810, T03820, T03830, T03840, T03850, T03860, T03870, T03900, T03940, T03950
French
File: webapp-cards-2.2-fr.yaml
Missing Tags
The following tags are present in the English version but missing in this translation:
T01411
Untranslated Tags
The following tags have identical text to English (not translated):
T00200, T01100, T02330, T02530, T03110, T03120, T03130, T03150, T03170, T03190, T03240, T03260, T03350, T03420, T03470, T03490, T03540, T03580, T03710, T03730, T03750, T03770, T03771, T03772, T03773, T03774, T03775
Hungarian
File: webapp-cards-2.2-hu.yaml
Missing Tags
The following tags are present in the English version but missing in this translation:
T00005, T00161, T00162, T01301, T01311, T01411
Untranslated Tags
The following tags have identical text to English (not translated):
T00020, T00030, T00140, T00145, T00200, T00210, T00220, T00230, T00240, T00300, T00320, T00340, T00350, T00360, T00370, T00380, T00390, T00400, T00500, T00510, T00520, T00600, T00610, T00700, T00710, T00720, T00730, T00740, T00750, T00760, T00770, T00780, T00790, T00800, T00810, T00830, T00840, T00900, T00910, T00920, T01000, T01020, T01060, T01100, T01110, T01120, T01130, T01140, T01150, T01160, T01170, T01190, T01200, T01240, T01250, T01260, T01270, T01280, T01290, T01300, T01400, T01410, T01420, T01430, T01431, T01440, T01450, T01500, T01510, T01520, T01530, T01540, T01550, T01560, T01570, T01571, T01580, T01590, T01600, T01610, T01700, T01710, T01720, T01730, T01740, T01800, T01810, T01811, T01820, T01900, T01910, T01920, T01930, T01940, T01960, T01970, T01980, T02000, T02010, T02020, T02030, T02040, T02100, T02120, T02140, T02200, T02220, T02240, T02250, T02260, T02280, T02290, T02300, T02310, T02320, T02330, T02340, T02400, T02410, T02420, T02440, T02450, T02460, T02480, T02490, T02500, T02510, T02520, T02530, T02540, T02600, T02610, T02620, T02630, T02650, T02680, T02690, T02700, T02710, T02720, T02730, T02760, T02770, T02790, T02800, T02810, T02820, T02840, T02850, T02860, T02870, T02880, T02890, T02900, T02910, T02920, T02930, T02940, T02950, T02960, T02970, T02980, T02990, T03000, T03020, T03100, T03110, T03120, T03130, T03140, T03150, T03160, T03170, T03190, T03200, T03210, T03220, T03230, T03240, T03250, T03260, T03270, T03280, T03290, T03300, T03310, T03320, T03330, T03340, T03350, T03360, T03370, T03380, T03390, T03400, T03410, T03420, T03430, T03450, T03460, T03470, T03480, T03490, T03500, T03510, T03520, T03530, T03540, T03550, T03560, T03570, T03580, T03590, T03600, T03610, T03620, T03630, T03640, T03650, T03660, T03670, T03680, T03690, T03700, T03710, T03720, T03730, T03740, T03750, T03760, T03770, T03771, T03772, T03773, T03774, T03775, T03800, T03810, T03820, T03830, T03840, T03900, T03920, T03950
Italian
File: webapp-cards-2.2-it.yaml
Untranslated Tags
The following tags have identical text to English (not translated):
T00380, T02330, T02530, T02940, T03130, T03150, T03170, T03190, T03240, T03250, T03260, T03350, T03420, T03470, T03490, T03540, T03580, T03710, T03730, T03750, T03770, T03771, T03772, T03773, T03774, T03775
Dutch
File: webapp-cards-2.2-nl.yaml
Missing Tags
The following tags are present in the English version but missing in this translation:
T01411
Untranslated Tags
The following tags have identical text to English (not translated):
T00500, T03130, T03150, T03170, T03190, T03240, T03260, T03350, T03420, T03470, T03540, T03580, T03710, T03730, T03750, T03770, T03771, T03772, T03773, T03774, T03775
Norwegian
File: webapp-cards-2.2-no_nb.yaml
Missing Tags
The following tags are present in the English version but missing in this translation:
T01411
Untranslated Tags
The following tags have identical text to English (not translated):
T00380, T01700, T02330, T02530, T03130, T03140, T03150, T03160, T03170, T03180, T03190, T03200, T03210, T03220, T03230, T03240, T03250, T03260, T03270, T03280, T03290, T03300, T03310, T03320, T03330, T03340, T03350, T03360, T03370, T03380, T03390, T03400, T03410, T03420, T03430, T03440, T03450, T03460, T03470, T03480, T03490, T03500, T03510, T03520, T03530, T03540, T03550, T03560, T03570, T03580, T03590, T03600, T03610, T03620, T03630, T03640, T03650, T03660, T03670, T03680, T03690, T03700, T03710, T03730, T03750, T03770, T03771, T03772, T03773, T03774, T03775
Portuguese (Brazil)
File: webapp-cards-2.2-pt_br.yaml
Missing Tags
The following tags are present in the English version but missing in this translation:
T01411
Untranslated Tags
The following tags have identical text to English (not translated):
T00380, T02250, T02290, T02310, T02330, T02450, T02490, T02510, T02530, T03100, T03110, T03120, T03130, T03140, T03150, T03160, T03170, T03180, T03190, T03200, T03210, T03220, T03230, T03240, T03250, T03260, T03270, T03280, T03290, T03300, T03310, T03320, T03330, T03340, T03350, T03360, T03370, T03380, T03390, T03400, T03410, T03420, T03430, T03440, T03450, T03460, T03470, T03480, T03490, T03500, T03510, T03520, T03530, T03540, T03550, T03560, T03570, T03580, T03590, T03600, T03610, T03620, T03630, T03640, T03650, T03660, T03670, T03680, T03690, T03700, T03710, T03720, T03730, T03750, T03770, T03771, T03772, T03773, T03774, T03775
Portuguese (Portugal)
File: webapp-cards-2.2-pt_pt.yaml
Untranslated Tags
The following tags have identical text to English (not translated):
T00380, T02330, T02530, T03130, T03150, T03170, T03190, T03240, T03260, T03350, T03420, T03470, T03490, T03540, T03580, T03710, T03730, T03750, T03770, T03771, T03772, T03773, T03774, T03775
Russian
File: webapp-cards-2.2-ru.yaml
Untranslated Tags
The following tags have identical text to English (not translated):
T00380, T01411, T02330, T02530, T03130, T03150, T03170, T03190, T03240, T03260, T03350, T03420, T03470, T03490, T03540, T03580, T03710, T03730, T03750, T03770, T03771, T03772, T03773, T03774, T03775
hi
File: webapp-cards-3.0-hi.yaml
Missing Tags
The following tags are present in the English version but missing in this translation:
T03390, T03400, T03410, T03560, T03570, T03610, T03620, T03630, T03640, T03650, T03670, T03680, T03690, T03700
Untranslated Tags
The following tags have identical text to English (not translated):
T03130, T03150, T03170, T03190, T03240, T03260, T03350, T03420, T03470, T03490, T03540, T03580, T03710, T03730, T03750, T03770, T03772, T03774
Italian
File: webapp-cards-3.0-it.yaml
Untranslated Tags
The following tags have identical text to English (not translated):
T00380, T02330, T02530, T02940, T03130, T03150, T03170, T03190, T03240, T03250, T03260, T03350, T03420, T03470, T03490, T03540, T03580, T03710, T03730, T03750, T03770, T03772, T03774
Dutch
File: webapp-cards-3.0-nl.yaml
Untranslated Tags
The following tags have identical text to English (not translated):
T00380, T02270, T02290, T02330, T02530, T03130, T03150, T03170, T03190, T03240, T03250, T03260, T03350, T03420, T03470, T03490, T03540, T03580, T03710, T03730, T03750, T03770, T03772, T03774
Norwegian
File: webapp-cards-3.0-no_nb.yaml
Missing Tags
The following tags are present in the English version but missing in this translation:
T01411
Untranslated Tags
The following tags have identical text to English (not translated):
T00380, T01700, T02330, T02530, T03130, T03140, T03150, T031...
Release v2.6.29
Full Changelog: v2.6.28...v2.6.29
Release v2.6.28
What's Changed
Full Changelog: v2.6.27...v2.6.28
Release v2.6.27
Full Changelog: v2.6.26...v2.6.27
Release v2.6.26
What's Changed
- Completed Portuguese translation fro 3.0 by @pfortuna in #2496
- Refine text on security mindset and threat modeling by @Bra1nFartz in #2500
New Contributors
Full Changelog: v2.6.25...v2.6.26
Release v2.6.25
What's Changed
- Added aashish kharel in a volunteers list by @immortal71 in #2429
- Bump @sveltejs/kit from 2.53.2 to 2.53.3 in /cornucopia.owasp.org by @dependabot[bot] in #2416
- Bump svelte-check from 4.4.3 to 4.4.4 in /cornucopia.owasp.org by @dependabot[bot] in #2414
- Bump @types/node from 25.3.0 to 25.3.2 in /cornucopia.owasp.org by @dependabot[bot] in #2413
- Bump phoenix_live_view from 1.1.24 to 1.1.25 in /copi.owasp.org by @dependabot[bot] in #2412
- Add link to privacy notice by @sydseter in #2440
- fix: add dynamic route for /api/cre/webapp and /api/cre/mobileapp by @Mysterio-17 in #2407
- fix: add Content-Type header to CRE API response by @Mysterio-17 in #2450
- increase Test coverage to 80.8% by @muhammad7865 in #2449
- Bump wrangler from 4.68.1 to 4.69.0 in /cornucopia.owasp.org by @dependabot[bot] in #2415
- security: remove game delete handler from GameLive.Index (#2420) by @immortal71 in #2455
- Italian Translation by @ricsirigu in #2463
- fix: remove incomplete delete game test from GameLiveTest by @Adarshkumar0509 in #2480
- Fixes #2432 (Phase 1: mobile spacing and touch targets) by @Mahaboobunnisa123 in #2484
New Contributors
- @ricsirigu made their first contribution in #2463
- @Mahaboobunnisa123 made their first contribution in #2484
Full Changelog: v2.6.24...v2.6.25
Release v2.6.24
What's Changed
- feat: Add Bandit pre-commit hook + fix XML parsing vulnerability (#2417) by @khushal-winner in #2421
- Webapp cards 3.0 Dutch version. by @marysia in #2427
- fix-dropdown-design : adding previous dropdown layout design by @prakhar0x01 in #2425
- pt_br translation of 43.0 cards by @izar in #2426
New Contributors
Full Changelog: v2.6.23...v2.6.24
Release v2.6.23
What's Changed
- Fix zip slip in ODT/IDML template extraction by @ashnaaseth2325-oss in #2327
- Revert "fix: prevent path prefix collision in _validate_file_paths" by @sydseter in #2410
Full Changelog: v2.6.22...v2.6.23
Release v2.6.22
What's Changed
- Add Adarsh Kumar to acknowledgements by @Adarshkumar0509 in #2402
Full Changelog: v2.6.21...v2.6.22
Release v2.6.21
What's Changed
- update contributers list by @ayman-art in #2338
- fix: use gh release upload for ZAP report upload to pre-release by @Mysterio-17 in #2339
- fixed inconsistent UTF-8 encoding by @Suresh-Krishna-P in #2330
- "poofing: 2-K, Ace" -> "Spoofing: 2-K, Ace" by @cw-owasp in #2345
- Create webapp-cards-3.0-hi.yaml by @SachinAditya in #2247
- Fix/zap max scan duration by @ayman-art in #2356
- DBD Cornucopia suits/cards by @cw-owasp in #2357
- Bump mvdan/shfmt from
67db984to67435efby @dependabot[bot] in #2350 - Bump @types/node from 25.2.3 to 25.3.0 in /cornucopia.owasp.org by @dependabot[bot] in #2351
- Feature/add-dropdown : Version Routing implementation by @prakhar0x01 in #2355
- "poofing: 2-K, Ace" -> "Spoofing: 2-K, Ace" by @cw-owasp in #2344
- Replace debug IO.puts statements with Logger in PlayerLive.Show (#2287) by @immortal71 in #2298
- Fix/zap permission error by @ayman-art in #2366
- Agentic AI suit by @suvroc in #2342
- BOT suit mapping correction by @cw-owasp in #2370
- Add description for mobile app card AA9 contributes to #2108 by @10-trix in #2323
- BOT attack attack format update; AAI duplicate tidy-up by @cw-owasp in #2372
- Bump mvdan/shfmt from
67435eftoa27f723by @dependabot[bot] in #2368 - Bump virtualenv from 20.38.0 to 20.39.0 by @dependabot[bot] in #2361
- Bump phoenix from 1.8.3 to 1.8.4 in /copi.owasp.org by @dependabot[bot] in #2362
- Bump swagger-ui-dist from 5.31.1 to 5.31.2 in /cornucopia.owasp.org by @dependabot[bot] in #2354
- Bump svelte-check from 4.4.1 to 4.4.3 in /cornucopia.owasp.org by @dependabot[bot] in #2353
- Add Norwegian translation by @sydseter in #2376
- Ensure the route to api goes to api/docs by @sydseter in #2326
- fix: prevent path prefix collision in _validate_file_paths by @ashnaaseth2325-oss in #2346
-
Fix: Handle whitespace-only translations properly by @khushal-winner in #2382
- Fix/reduce max scan duration by @ayman-art in #2383
- Fix narrative inconsistency: update remaining Ryan reference to Adrian in AZK card by @Copilot in #2392
- Fix/broken pdf link :
host Secure Web Development Guide PDF publicly to resolve auth requirement #2283by @prakhar0x01 in #2395 - Added Khushal Malhotra to Volunteers list (alphabetical order) by @khushal-winner in #2394
- Bump wrangler from 4.66.0 to 4.68.1 in /cornucopia.owasp.org by @dependabot[bot] in #2391
- Bump swoosh from 1.22.0 to 1.22.1 in /copi.owasp.org by @dependabot[bot] in #2387
- Adding Adrian Sroka to AZK by @sydseter in #2385
- Add blog post: Straight to the Ace - Threat Modeling Through Gamification by @Bra1nFartz in #2373
- Bump certifi from 2026.1.4 to 2026.2.25 by @dependabot[bot] in #2369
- Fix ArithmeticError when starting game with zero players by @immortal71 in #2336
- Bump @sveltejs/kit from 2.53.0 to 2.53.2 in /cornucopia.owasp.org by @dependabot[bot] in #2389
- Fix/player-name-validation : Add length validation to Player name field to prevent DB truncation errors by @prakhar0x01 in #2308
- Fix mobile padding on news page by @khushal-winner in #2401
- Add framed privacy notices to game and player forms by @Adarshkumar0509 in #2262
New Contributors
- @ashnaaseth2325-oss made their first contribution in #2346
- @khushal-winner made their first contribution in #2382
- @Copilot made their first contribution in #2392
- @Bra1nFartz made their first contribution in #2373
- @Adarshkumar0509 made their first contribution in #2262
Full Changelog: v2.6.20...v2.6.21