OWASP’s API Security Project has released the first edition of its top 10 list of API security risks.