OWASP LLM Top 10 2026 migration crosswalk

Returns edition-qualified 2026 categories and predecessor labels used to migrate dashboards without changing stable internal rule IDs. A category mapping describes relevance; it is not a claim of full mitigation.

Usage

owasp_crosswalk(show_stats = FALSE)

Arguments

show_stats

Show lookup time and available usage metrics.

Value

A data frame with 2026 IDs, names, predecessor IDs, and package evidence level.

Examples

owasp_crosswalk()
#>       id_2026                        name_2026 predecessor_2025
#> 1  LLM01:2026                 Prompt Injection       LLM01:2025
#> 2  LLM02:2026 Sensitive Information Disclosure       LLM02:2025
#> 3  LLM03:2026                 Excessive Agency       LLM06:2025
#> 4  LLM04:2026                     Supply Chain       LLM03:2025
#> 5  LLM05:2026         Data and Model Poisoning       LLM04:2025
#> 6  LLM06:2026            Unbounded Consumption       LLM10:2025
#> 7  LLM07:2026                   Misinformation       LLM09:2025
#> 8  LLM08:2026          Hidden Context Exposure       LLM07:2025
#> 9  LLM09:2026  Vector and Embedding Weaknesses       LLM08:2025
#> 10 LLM10:2026         Improper Output Handling       LLM05:2025
#>                   package_evidence
#> 1   detector and boundary controls
#> 2  detector and redaction controls
#> 3         agency and tool controls
#> 4                    metadata only
#> 5       context provenance signals
#> 6         quota and limit controls
#> 7      claim and grounding signals
#> 8         hidden-context detectors
#> 9       context admission controls
#> 10       contract and URL controls