OWASP API3 2023 No Additional Properties (Edit)
By default JSON Schema allows additional properties, which can potentially lead to mass assignment issues, where unspecified fields are passed to the API without validation. Disable them with additionalProperties set to false or add maxProperties.
OWASPSecuritySchemaOpenAPI