Start free

Browse › Introduction To OWASP Top Ten

OWASP Top Ten 2025 - A03 Software Supply Chain Failures

Part of Introduction To OWASP Top Ten Topic: Web Hacking

Counts towardsCompTIA PenTest+ badgeEC-Council CEH badgeCompTIA SecAI+ badgeOffSec OSCP badge

Access

Included in StationX Membership — unlimited attempts

🔒 StationX Membership — $299 / year ($24.92/mo billed annually)

Already have access? Sign in.

New to this? Try a free practice lab — a scripted hacking challenge in your browser, no account needed.

What you'll do

In this lab, students will learn about the "A03:2025 Software Supply Chain Failures" vulnerability of the OWASP Top Ten and explore risks introduced through the software supply chain, including compromised dependencies and insecure build processes.

  • They will identify vulnerable components and simulate how attackers can exploit weaknesses in third-party libraries or deployment pipelines, reinforcing the importance of supply chain security.
  • They will also look at tools to help identify outdated libraries to minimize the vulnerabilities.

Roadmaps that use this lab