API3:2023 Broken Object Property Level Authorization - OWASP API Security Top 10
The Ten Most Critical API Security Risks
owasp.org