Latest pre-release

OWASP Cornucopia Pre-Release

This is an automated pre-release build from the latest master branch.

---

Translation Check Report

The following sentences/tags have issues in the translations:

Spanish

File: eop-cards-5.0-es.yaml

Untranslated Tags

The following tags have identical text to English (not translated):

T00105, T00140

Russian

File: eop-cards-5.0-ru.yaml

Untranslated Tags

The following tags have identical text to English (not translated):

T00001, T00003, T00004, T00090, T00100, T00105, T00210, T00220, T00230, T00240, T00250, T00260, T00270, T00280, T00290, T00300, T00310, T00320, T00330, T00340, T00350, T00360, T00370, T00380, T00390, T00400, T00410, T00420, T00430, T00440, T00450, T00460, T00470, T00480

Russian

File: mobileapp-cards-1.0-ru.yaml

Untranslated Tags

The following tags have identical text to English (not translated):

T00020, T00120, T00130, T00220, T00240, T00310, T00311, T00320, T00330, T00340, T00350, T00360, T00370, T00380, T00390, T00400, T00510, T00520, T00530, T00610, T01010, T01070, T01160, T01170, T01180, T01200, T01210, T01220, T01301, T01411, T02680, T02690, T02700, T02710, T02720, T02730, T02780, T03010

Russian

File: mobileapp-cards-1.1-ru.yaml

Untranslated Tags

The following tags have identical text to English (not translated):

T00020, T00120, T00130, T00220, T00240, T00310, T00311, T00320, T00330, T00340, T00350, T00360, T00370, T00380, T00390, T00400, T00510, T00520, T00530, T00610, T01010, T01070, T01160, T01170, T01180, T01200, T01210, T01220, T01301, T01411, T02680, T02690, T02700, T02710, T02720, T02730, T02780, T03010

Spanish

File: webapp-cards-2.2-es.yaml

Missing Tags

The following tags are present in the English version but missing in this translation:

T01411

Untranslated Tags

The following tags have identical text to English (not translated):

T00020, T00030, T00380, T01590, T02940, T03140, T03160, T03180, T03200, T03210, T03220, T03230, T03250, T03270, T03280, T03290, T03300, T03310, T03320, T03330, T03340, T03360, T03370, T03380, T03390, T03400, T03410, T03430, T03440, T03450, T03460, T03480, T03500, T03510, T03520, T03530, T03550, T03560, T03570, T03590, T03600, T03610, T03620, T03630, T03640, T03650, T03660, T03670, T03680, T03690, T03700, T03720, T03771, T03773, T03775, T03800, T03810, T03820, T03830, T03840, T03850, T03860, T03870, T03900, T03940, T03950

French

File: webapp-cards-2.2-fr.yaml

Missing Tags

The following tags are present in the English version but missing in this translation:

T01411

Untranslated Tags

The following tags have identical text to English (not translated):

T00200, T01100, T03110, T03120, T03771, T03773, T03775

Hungarian

File: webapp-cards-2.2-hu.yaml

Missing Tags

The following tags are present in the English version but missing in this translation:

T00005, T00161, T00162, T01301, T01311, T01411

Untranslated Tags

The following tags have identical text to English (not translated):

T00020, T00030, T00140, T00145, T00200, T00210, T00220, T00230, T00240, T00300, T00320, T00340, T00350, T00360, T00370, T00380, T00390, T00400, T00500, T00510, T00520, T00600, T00610, T00700, T00710, T00720, T00730, T00740, T00750, T00760, T00770, T00780, T00790, T00800, T00810, T00830, T00840, T00900, T00910, T00920, T01000, T01020, T01060, T01100, T01110, T01120, T01130, T01140, T01150, T01160, T01170, T01190, T01200, T01240, T01250, T01260, T01270, T01280, T01290, T01300, T01400, T01410, T01420, T01430, T01431, T01440, T01450, T01500, T01510, T01520, T01530, T01540, T01550, T01560, T01570, T01571, T01580, T01590, T01600, T01610, T01700, T01710, T01720, T01730, T01740, T01800, T01810, T01811, T01820, T01900, T01910, T01920, T01930, T01940, T01960, T01970, T01980, T02000, T02010, T02020, T02030, T02040, T02100, T02120, T02140, T02200, T02220, T02240, T02250, T02260, T02280, T02290, T02300, T02310, T02320, T02340, T02400, T02410, T02420, T02440, T02450, T02460, T02480, T02490, T02500, T02510, T02520, T02540, T02600, T02610, T02620, T02630, T02650, T02680, T02690, T02700, T02710, T02720, T02730, T02760, T02770, T02790, T02800, T02810, T02820, T02840, T02850, T02860, T02870, T02880, T02890, T02900, T02910, T02920, T02930, T02940, T02950, T02960, T02970, T02980, T02990, T03000, T03020, T03100, T03110, T03120, T03140, T03160, T03200, T03210, T03220, T03230, T03250, T03270, T03280, T03290, T03300, T03310, T03320, T03330, T03340, T03360, T03370, T03380, T03390, T03400, T03410, T03430, T03450, T03460, T03480, T03500, T03510, T03520, T03530, T03550, T03560, T03570, T03590, T03600, T03610, T03620, T03630, T03640, T03650, T03660, T03670, T03680, T03690, T03700, T03720, T03740, T03760, T03771, T03773, T03775, T03800, T03810, T03820, T03830, T03840, T03900, T03920, T03950

Italian

File: webapp-cards-2.2-it.yaml

Untranslated Tags

The following tags have identical text to English (not translated):

T00380, T02940, T03250, T03771, T03773, T03775

Dutch

File: webapp-cards-2.2-nl.yaml

Missing Tags

The following tags are present in the English version but missing in this translation:

T01411

Untranslated Tags

The following tags have identical text to English (not translated):

T00500, T03771, T03773, T03775

Norwegian

File: webapp-cards-2.2-no_nb.yaml

Missing Tags

The following tags are present in the English version but missing in this translation:

T01411

Untranslated Tags

The following tags have identical text to English (not translated):

T00380, T01700, T03140, T03160, T03180, T03200, T03210, T03220, T03230, T03250, T03270, T03280, T03290, T03300, T03310, T03320, T03330, T03340, T03360, T03370, T03380, T03390, T03400, T03410, T03430, T03440, T03450, T03460, T03480, T03500, T03510, T03520, T03530, T03550, T03560, T03570, T03590, T03600, T03610, T03620, T03630, T03640, T03650, T03660, T03670, T03680, T03690, T03700, T03771, T03773, T03775

Portuguese (Brazil)

File: webapp-cards-2.2-pt_br.yaml

Missing Tags

The following tags are present in the English version but missing in this translation:

T01411

Untranslated Tags

The following tags have identical text to English (not translated):

T00380, T02250, T02290, T02310, T02450, T02490, T02510, T03100, T03110, T03120, T03140, T03160, T03180, T03200, T03210, T03220, T03230, T03250, T03270, T03280, T03290, T03300, T03310, T03320, T03330, T03340, T03360, T03370, T03380, T03390, T03400, T03410, T03430, T03440, T03450, T03460, T03480, T03500, T03510, T03520, T03530, T03550, T03560, T03570, T03590, T03600, T03610, T03620, T03630, T03640, T03650, T03660, T03670, T03680, T03690, T03700, T03720, T03771, T03773, T03775

Portuguese (Portugal)

File: webapp-cards-2.2-pt_pt.yaml

Untranslated Tags

The following tags have identical text to English (not translated):

T00380, T03771, T03773, T03775

Russian

File: webapp-cards-2.2-ru.yaml

Untranslated Tags

The following tags have identical text to English (not translated):

T00380, T01411, T03771, T03773, T03775

French

File: webapp-cards-3.0-fr.yaml

Missing Tags

The following tags are present in the English version but missing in this translation:

T01411

Untranslated Tags

The following tags have identical text to English (not translated):

T00200, T01100, T03110, T03120

Italian

File: webapp-cards-3.0-it.yaml

Untranslated Tags

The following tags have identical text to English (not translated):

T00380, T02940, T03250

Dutch

File: webapp-cards-3.0-nl.yaml

Untranslated Tags

The following tags have identical text to English (not translated):

T00380, T02270, T02290, T03250

Norwegian

File: webapp-cards-3.0-no_nb.yaml

Untranslated Tags

The following tags have identical text to English (not translated):

T00380, T01700, T03140, T03160, T03180, T03200, T03210, T03220, T03230, T03250, T03270, T03280, T03290, T03300, T03310, T03320, T03330, T03340, T03360, T03370, T03380, T03390, T03400, T03410, T03430, T03440, T03450, T03460, T03480, T03500, T03510, T03520, T03530, T03550, T03560, T03570, T03590, T03600, T03610, T03620, T03630, T03640, T03650, T03660, T03670, T03680, T03690, T03700

Portuguese (Brazil)

File: webapp-cards-3.0-pt_br.yaml

Untranslated Tags

The following tags have identical text to English (not translated):

T00330, T00340, T00350, T00360, T00370, T00380, T02240, T02260, T02280, T02300, T02320, T02340, T02440, T02460, T02480, T02500, T02520, T02540

Portuguese (Portugal)

File: webapp-cards-3.0-pt_pt.yaml

Untranslated Tags

The following tags have identical text to English (not translated):

T00380

Russian

File: webapp-cards-3.0-ru.yaml

Untranslated Tags

The following tags have identical text to English (not translated):

T00380

Release v2.8.2

What's Changed

• build(deps-dev): bump wrangler from 4.82.2 to 4.83.0 in /cornucopia.owasp.org by @dependabot[bot] in #2825
• build(deps): bump swagger-ui-dist from 5.32.2 to 5.32.4 in /cornucopia.owasp.org by @dependabot[bot] in #2824
• Add descriptions for all LLM companion cards (LLM2-LLMK, LLMA) by @MrMartiniMo in #2831
• Add security mappings (STRIDE, CIA, MITRE ATLAS, OWASP LLM Top 10, CWE) for all LLM companion cards (LLM2-LLMK) by @MrMartiniMo in #2833

New Contributors

• @MrMartiniMo made their first contribution in #2831

Full Changelog: v2.8.1...v2.8.2

Release v2.8.1

Full Changelog: v2.8.0...v2.8.1

Release v2.8.0

What's Changed

• fix(security): encrypt existing game and player names during migration by @Adarshkumar0509 in #2754
• fix: remove unused scores field from DealtCard schema and database by @Adarshkumar0509 in #2711
• build(deps): bump pytest from 9.0.2 to 9.0.3 by @dependabot[bot] in #2784
• build(deps-dev): bump @sveltejs/kit from 2.55.0 to 2.57.0 in /cornucopia.owasp.org by @dependabot[bot] in #2783
• build(deps): bump swagger-ui-dist from 5.32.1 to 5.32.2 in /cornucopia.owasp.org by @dependabot[bot] in #2782
• build(deps): bump charset-normalizer from 3.4.6 to 3.4.7 by @dependabot[bot] in #2779
• build(deps): bump mypy from 1.18.2 to 1.20.0 by @dependabot[bot] in #2778
• build(deps): bump types-defusedxml from 0.7.0.20250822 to 0.7.0.20260408 by @dependabot[bot] in #2777
• build(deps): bump mvdan/shfmt from 550a523 to d8dd687 by @dependabot[bot] in #2776
• build(deps): bump types-requests from 2.32.4.20260324 to 2.33.0.20260408 by @dependabot[bot] in #2781
• build(deps-dev): bump wrangler from 4.81.0 to 4.81.1 in /cornucopia.owasp.org by @dependabot[bot] in #2791
• build(deps): bump lxml from 5.4.0 to 6.0.3 by @dependabot[bot] in #2787
• build(deps-dev): bump @sveltejs/kit from 2.57.0 to 2.57.1 in /cornucopia.owasp.org by @dependabot[bot] in #2788
• build(deps-dev): bump @types/node from 25.5.2 to 25.6.0 in /cornucopia.owasp.org by @dependabot[bot] in #2790
• Agentic AI cards suit, descrition by @suvroc in #2795
• build(deps-dev): bump wait-on from 9.0.4 to 9.0.5 in /cornucopia.owasp.org by @dependabot[bot] in #2803
• build(deps-dev): bump dotenv from 17.4.1 to 17.4.2 in /cornucopia.owasp.org by @dependabot[bot] in #2806
• build(deps): bump types-pyyaml from 6.0.12.20250915 to 6.0.12.20260408 by @dependabot[bot] in #2805
• build(deps-dev): bump credo from 1.7.17 to 1.7.18 in /copi.owasp.org by @dependabot[bot] in #2802
• build(deps): bump mypy from 1.19.1 to 1.20.1 by @dependabot[bot] in #2799
• build(deps): bump requests from 2.32.4 to 2.33.1 by @dependabot[bot] in #2800
• Frontend descriptions by @suvroc in #2797
• Cloud descriptions by @suvroc in #2796
• add targeted test for mappingService missing mapping scenario by @theanand108 in #2808
• improve error handling and add negative tests for DeckService by @theanand108 in #2774
• build(deps-dev): bump wrangler from 4.81.1 to 4.82.2 in /cornucopia.owasp.org by @dependabot[bot] in #2815
• build(deps-dev): bump svelte-sitemap from 3.0.1 to 3.1.0 in /cornucopia.owasp.org by @dependabot[bot] in #2814
• build(deps): bump lxml from 5.4.0 to 6.0.4 by @dependabot[bot] in #2809
• build(deps-dev): bump typescript from 5.9.3 to 6.0.2 in /cornucopia.owasp.org by @dependabot[bot] in #2793
• fix: prevent joining and spectating games already in progress by @Mysterio-17 in #2531
• Fix: Resolve SvelteKit Worker crashes in Website ZAP Scan Docker build by @Mysterio-17 in #2816
• fix: add form-action 'self' to CSP header for copi.owasp.org by @Adarshkumar0509 in #2775

Full Changelog: v2.7.0...v2.8.0

Release v2.7.0

What's Changed

• feat: add API endpoints for DBD edition by @Mysterio-17 in #2715
• feat: Create mapping API endpoints for webapp and mobileapp editions by @Mysterio-17 in #2744
• feat: add ZAP nightly DAST scan for cornucopia website by @Mysterio-17 in #2765
• Bump mvdan/shfmt from 98464e8 to 550a523 by @dependabot[bot] in #2762
• Bump swoosh from 1.24.0 to 1.25.0 in /copi.owasp.org by @dependabot[bot] in #2759
• Bump lazy_html from 0.1.10 to 0.1.11 in /copi.owasp.org by @dependabot[bot] in #2758
• Bump svelte-check from 4.4.5 to 4.4.6 in /cornucopia.owasp.org by @dependabot[bot] in #2752
• Bump phoenix_live_view from 1.1.27 to 1.1.28 in /copi.owasp.org by @dependabot[bot] in #2748
• Bump requests from 2.32.4 to 2.33.0 by @dependabot[bot] in #2739
• Bump tomli from 2.2.1 to 2.4.1 by @dependabot[bot] in #2738
• Bump types-requests from 2.32.4.20250913 to 2.32.4.20260324 by @dependabot[bot] in #2734
• Bump pipenv from 2026.2.1 to 2026.2.2 by @dependabot[bot] in #2733
• Bump dotenv from 17.3.1 to 17.4.1 in /cornucopia.owasp.org by @dependabot[bot] in #2771
• Fix/2491 unclosed file handles by @immortal71 in #2522
• fix: handle_event(next_round) missing early return causes double broadcast (#2418) by @immortal71 in #2707
• Bump pytest-cov from 6.2.1 to 7.1.0 by @dependabot[bot] in #2719
• fix: use soffice.exe directly on Windows to avoid soffice.COM detection by @ANNI160 in #2745
• Bump pipenv from 2026.2.2 to 2026.5.2 by @dependabot[bot] in #2766
• Bump charset-normalizer from 3.4.6 to 3.4.7 by @dependabot[bot] in #2767
• Bump click from 8.3.0 to 8.3.2 by @dependabot[bot] in #2768
• Bump @types/node from 25.5.0 to 25.5.2 in /cornucopia.owasp.org by @dependabot[bot] in #2770
• Bump mypy from 1.18.2 to 1.20.0 by @dependabot[bot] in #2769
• Bump wrangler from 4.76.0 to 4.81.0 in /cornucopia.owasp.org by @dependabot[bot] in #2772
• Bump vite-plugin-static-copy from 3.3.0 to 4.0.1 in /cornucopia.owasp.org by @dependabot[bot] in #2773

New Contributors

• @ANNI160 made their first contribution in #2745

Full Changelog: v2.6.38...v2.6.39

Release v2.6.38

What's Changed

• Adding news article about The Cornucopia of Gamified Threat Modeling by @sydseter in #2732

Full Changelog: v2.6.37...v2.6.38

Release v2.6.37

What's Changed

• Remove json formating from CAPEC by @sydseter in #2725
• Bump swoosh from 1.23.1 to 1.24.0 in /copi.owasp.org by @dependabot[bot] in #2729
• Bump types-requests from 2.32.4.20250913 to 2.32.4.20260324 by @dependabot[bot] in #2728

Full Changelog: v2.6.36...v2.6.37

Release v2.6.36

What's Changed

• Add additional descriptions to the authorization cards by @sydseter in #2716
• Update latests languages for mobileapp (hi, uk) as per maintainer gui… by @prasunsrivastav123-lang in #2682
• Bump wrangler from 4.75.0 to 4.76.0 in /cornucopia.owasp.org by @dependabot[bot] in #2721
• Bump mvdan/shfmt from be41bc4 to 98464e8 by @dependabot[bot] in #2718
• Update index.md by @sydseter in #2727
• Add ASVS and CAPEC webapp API endpoints for v3.0 by @Mahaboobunnisa123 in #2726

Full Changelog: v2.6.35...v2.6.36

Release v2.6.35

What's Changed

• Use DeckService.getLatestVersion() instead of hardcoded version in ca… by @theanand108 in #2672
• fix: add authorization check in toggle_vote to prevent cross-game voting by @Adarshkumar0509 in #2523
• fix: guard against missing Categories key in extract_capec_names by @immortal71 in #2506
• Bump coverage from 7.13.4 to 7.13.5 by @dependabot[bot] in #2677
• Bump pipenv from 2026.1.0 to 2026.2.0 by @dependabot[bot] in #2676
• Fix: Integrate eslint-config-love and resolve ~1430 lint errors (#2647) by @Adarshkumar0509 in #2675
• Fix card mapping visibility on mobile for long translations by @Mysterio-17 in #2662
• Fix inconsistent function naming by @Suresh-Krishna-P in #2454
• Fixed Duplicate Constants by @Suresh-Krishna-P in #2680
• docs(AA7): improve scenario, STRIDE mapping and mitigation guidance by @ishaP10 in #2683
• Bump attrs from 25.3.0 to 26.1.0 by @dependabot[bot] in #2705
• Bump pipenv from 2026.2.0 to 2026.2.1 by @dependabot[bot] in #2704
• Fix mobileapp-cards-1.1-en.yaml for spelling errors by @sydseter in #2697
• Check webapp-cards-3.0-en.yaml for spelling errors by @sydseter in #2699
• merge redundant smoke test steps and optimize server lifecycle by @abhijit9040 in #2712
• Change the text for cards belonging to VE, AT & SM to align them with modern authentication and session management practices by @sydseter in #2710
• Removing the social engineering suite by @sydseter in #2714
• Check mobileapp-cards-1.1-uk.yaml for translation errors by @sydseter in #2701
• Check mobileapp-cards-1.0-hi.yaml for translation errors by @sydseter in #2695
• check webapp-cards-3.0-ru.yaml for translation errors by @sydseter in #2693
• Check webapp-cards-3.0-hi.yaml for translation errors by @sydseter in #2689
• Check webapp-cards-3.0-pt_br.yaml by @sydseter in #2687
• Check webapp-cards-3.0-nl.yaml for translation errors by @sydseter in #2666
• apply copilot translation fixes after verifying using google AI searc… by @ayman-art in #2717

New Contributors

• @theanand108 made their first contribution in #2672

Full Changelog: v2.6.34...v2.6.35

Release v2.6.34

What's Changed

• Correct webapp-cards-3.0-pt_pt.yaml for translation errors by @sydseter in #2664
• Corrected webapp-cards-3.0-it.yaml for translation errors by @sydseter in #2668

Full Changelog: v2.6.33...v2.6.34