In the OWASP Top 10 (2021), which category replaced 'Injection' at the #1 spot?

• 1A01 Broken Access Control
• 2A02 Cryptographic Failures
• 3A03 Injection (it is still #1)
• 4A07 Identification & Authentication Failures