Unverified50% confidenceFactExact time

CycloneDX 由 OWASP 推动，内置丰富的安全元数据支持，如漏洞披露、可利用性评分、组件依赖图谱

1

Sources

50%

Confidence

Long-term

Relevance

7/11/2026

First Seen

Sources

解读政府软件安全行政令：供应链合规与SBOM新要求

hackernewshackernews7/9/2026

Related Claims

UnverifiedOWASP将注入攻击、加密失败、安全配置错误列为Web应用三大高危类别73% similar VerifiedOWASP（Open Web Application Security Project）是全球最具影响力的Web应用安全开源社区，其发布的OWASP Top 10是业界公认的Web安全风险分类标准72% similar VerifiedOWASP已将Prompt注入列为LLM应用十大安全风险之首71% similar VerifiedOWASP将用户枚举攻击（User Enumeration Attack）列为常见安全风险70% similar

Cite This Claim

Stable URI

https://kongchang.com/claim/482998

API

curl https://kongchang.com/api/v1/knowledge/claims/482998

MCP

get_claim(id=482998)