This release includes 1 breaking change for platform teams planning a safe upgrade.
Published 5mo
Vulnerability Scanning
✓ No known CVEs patched
✓ No known CVEs patched in this version
Topics
security
burpsuite
css
java
javascript
learn-security
+9 more
owasp
owasp-zap
payload-testing
practice-hacking
spring-boot
test-vulnerability-scanning-tools
vulnerability
vulnerability-scanning
vulnerable-application
Affected surfaces
auth
rce_ssrf
Summary
AI summaryUpdates Fix, Typo, and feat across a mixed release.
Full changelog
What's Changed
- Typo: added missing m in consumption by @kjosh in https://github.com/SasanLabs/VulnerableApp/pull/466
- Add JWT unit tests by @kjosh in https://github.com/SasanLabs/VulnerableApp/pull/467
- Add unit tests for Blind SQL Injection Vulnerability levels 1, 2, and 3 by @imertetsu in https://github.com/SasanLabs/VulnerableApp/pull/474
- Blind sql injection vulnerabilities secure implementations by @imertetsu in https://github.com/SasanLabs/VulnerableApp/pull/477
- feat: implement header param injection handling for JWT vulnerabilities by @leiberbertel in https://github.com/SasanLabs/VulnerableApp/pull/473
- feat(i18n): add Bengali and Marathi translation by @amritamishra01 in https://github.com/SasanLabs/VulnerableApp/pull/484
- fix: remove deprecated Docker compose version and pin facade image to 1.2.1 by @Aryan-Pillai7 in https://github.com/SasanLabs/VulnerableApp/pull/489
- Increase coverage of 'XXEVulnerability' class to 100% by @demoralizerr in https://github.com/SasanLabs/VulnerableApp/pull/492
- Add Gujarati langugae Translation i18N file! by @demoralizerr in https://github.com/SasanLabs/VulnerableApp/pull/490
- Increased Junit coverage for 'PreflightController' & 'UnrestrictedFileUpload' class by @demoralizerr in https://github.com/SasanLabs/VulnerableApp/pull/493
- Fix multiple issues: Docker latest tag, Korean translation, secure XSS/XXE variants, JWT levels, and Cryptographic failures vulnerability by @colloceo in https://github.com/SasanLabs/VulnerableApp/pull/491
- build: upgrade to java 17 and update CI workflows by @antriksh-9 in https://github.com/SasanLabs/VulnerableApp/pull/496
- Fix: Refactor JWT Level 13 to use cookie-based flow and vulnerable JWK verification by @subhamkumarr in https://github.com/SasanLabs/VulnerableApp/pull/499
- Fix: Use consistent latest Docker tag across services by @incursio-xd in https://github.com/SasanLabs/VulnerableApp/pull/505
New Contributors
- @kjosh made their first contribution in https://github.com/SasanLabs/VulnerableApp/pull/466
- @imertetsu made their first contribution in https://github.com/SasanLabs/VulnerableApp/pull/474
- @leiberbertel made their first contribution in https://github.com/SasanLabs/VulnerableApp/pull/473
- @amritamishra01 made their first contribution in https://github.com/SasanLabs/VulnerableApp/pull/484
- @Aryan-Pillai7 made their first contribution in https://github.com/SasanLabs/VulnerableApp/pull/489
- @demoralizerr made their first contribution in https://github.com/SasanLabs/VulnerableApp/pull/492
- @colloceo made their first contribution in https://github.com/SasanLabs/VulnerableApp/pull/491
- @antriksh-9 made their first contribution in https://github.com/SasanLabs/VulnerableApp/pull/496
- @subhamkumarr made their first contribution in https://github.com/SasanLabs/VulnerableApp/pull/499
- @incursio-xd made their first contribution in https://github.com/SasanLabs/VulnerableApp/pull/505
Full Changelog: https://github.com/SasanLabs/VulnerableApp/compare/1.12.0...1.12.27
Breaking Changes
- Removed deprecated Docker Compose version usage; pin facade image to 1.2.1.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About VulnerableApp
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]