OWASP Top 10
Open Worldwide Application Security Project's ranking of the most common web application security risks, refreshed every 3 to 4 years. Current edition: 2021, with A03 Injection, A07 Identification and Authentication Failures, and others.