Welcome to the Linux Foundation Forum!

Understanding the OWASP® Top 10 Security Threats Has Been Updated!

dharmon
dharmon Posts: 29
edited August 17 in Cybersecurity Training

The Understanding the OWASP® Top 10 Security Threats (SKF100) course has been updated to align with the OWASP® Top 10:2025 version.

The update includes revised content across all ten categories, new and updated examples, and improvements to the course activities and knowledge checks. The lessons have also been refined to make the material easier to follow while keeping the focus on practical application security concepts.

If you have taken the course before, this is a good opportunity to revisit it and see what has changed in the 2025 OWASP® Top 10.

Comments

  • bcatteau
    bcatteau Posts: 1

    Dear,
    I'm stuck in the lab session of OWASP A03:2025 — Software Supply Chain Failures.

    • confused because contrary to the instructions 1. Download and extract... there is already a "vulnerable-project" present in the terminal.

    • skipping step 1 and going to step 2, the instructions should I think be split into

      • python3 -m venv venv
      • source venv/bin/activate
      • cd vulnerable-project
      • pip install -r requirements.txt

    • last step "pip install ..." does not work because installing Pillow=9.0.0 gives the following error

            File "/tmp/pip-build-env-0m0vgp9x/overlay/lib/python3.13/site-packages/setuptools/build_meta.py", line 317, in run_setup
          exec(code, locals())  # noqa: S102 # exec is intentional here
          ~~~~^^^^^^^^^^^^^^^^
        File "<string>", line 29, in <module>
        File "<string>", line 26, in get_version
      KeyError: '__version__'
      [end of output]

    Could you please have a look at this lab?

  • dharmon
    dharmon Posts: 29

    Hi @bcatteau,

    Thank you for reporting this and for providing the details about what you encountered.

    The course author is currently reviewing the lab. We’ll follow up here again once it has been updated.

    We appreciate you bringing this to our attention.

    Best,
    David H.
    Linux Foundation Education

  • dharmon
    dharmon Posts: 29

    Hi @bcatteau,

    Thank you for your patience while we reviewed this.

    The course author confirmed that the installation failure in this exercise is intentional. The requirements.txt file includes a typosquatted package that does not exist on PyPI, and identifying that issue is part of the exercise.

    The lab instructions have been updated to make this expected behavior clearer. Please let us know if you continue to run into any issues.

    Best,
    David H.
    Linux Foundation Education

Categories

Upcoming Training