What OWASP LLM Top 10 LLM05 - Supply Chain Vulnerabilities in LLM Applications - Compliance Obligations for AI Supply Chain Risk Management, Third-Party Model and Plugin Governance, and LLM Dependency Security Controls requires
This node outlines obligations for managing supply chain vulnerabilities in LLM applications as per OWASP LLM Top 10 (LLM05), focusing on third-party model governance, plugin security, and dependency controls, with overlapping requirements under the EU AI Act (Regulation 2024/1689, Articles 6 and 28). It provides actionable controls for risk assessment and mitigation aligned with global AI governance standards.
Pillar: AI Governance & Law · Authority: OWASP Foundation · Version: 1.0.0 · Last updated:
Primary source: https://owasp.org/www-project-top-10-for-large-language-model-applications/
SHA-256 integrity: 3373f820f5e1e8b8256a46b61a4f848b16fb908a569c2ac5a51dc2283c2ea336
Primary Citations — 5 traced to source
- OWASP Top 10 for Large Language Model Applications - LLM05 Supply Chain Vulnerabilities, https://owasp.org/www-project-top-10-for-large-language-model-applications/, Section LLM05, 2023
- EU AI Act - Regulation (EU) 2024/1689, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689, Article 6 and Article 28, 2024
+ 3 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/owasp-llm-05-supply-chain-vulnerabilities.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/owasp-llm-05-supply-chain-vulnerabilities.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/owasp-llm-05-supply-chain-vulnerabilities
- Back to registry: Browse all 10,108 compliance nodes