{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"ai_governance","domain":["AI Governance","Secure Development (SDLC) & Application Security"],"inherent_rating":"high","taxonomy":["owasp-llm-top10-2025"]},"canonicalUrl":"https://controlsmap.com/?v=1&node=risk%3Aai-insecure-generated-code","description":"Code-generating AI produces insecure defaults (injection-prone queries, weak authentication and session handling, unsafe logging) or specifies non-existent, hallucinated, or typosquatted packages that attackers pre-register, introducing vulnerabilities and malicious dependencies into production software.","details":{"category":"ai_governance","impact":"high","inherent_rating":"high","likelihood":"high","risk_id":"ai-insecure-generated-code","taxonomies":["owasp-llm-top10-2025"],"treatment":"mitigate"},"id":"risk:ai-insecure-generated-code","mapUrl":"https://controlsmap.com/?v=1&node=risk%3Aai-insecure-generated-code","sourceIds":["aiuc-1","iso-27001","nist-800-53"],"sourceUrl":null,"title":"Insecure AI-generated code and hallucinated or typosquatted dependencies","type":"risk"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:5c3c9a588f4dde7c6fd82e5253243b4c08407e5bfc73c632832f13f2b274825c","properties":{"rationale":"Secure-by-default guidance and pinned, verified dependency specification for code-generating systems directly counter insecure generated code and hallucinated packages.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-25-21e48906.json","sourceId":"uc:UC-AI-25","targetDetailPath":"/data/v1/records/risk-ai-insecure-generated-code-ec50f0f9.json","targetId":"risk:ai-insecure-generated-code","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:f89820e3199afdd0e358903f90664edb19e5e9917f411824cd4a7b79b260574d","properties":{"rationale":"Static and dynamic testing before acceptance catches insecure patterns and unsafe dependencies in AI-generated code.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-vuln-04-d07c87cf.json","sourceId":"uc:UC-VULN-04","targetDetailPath":"/data/v1/records/risk-ai-insecure-generated-code-ec50f0f9.json","targetId":"risk:ai-insecure-generated-code","type":"mitigates"}],"schemaVersion":1}