All pull requests

Pull requests

• feat(mobile): add upgrade SQL for existing installs (#894 review)

  Mobile
  #1119·SeanDuggan opened Nov 9, 2026Member·

  ·

  · 4.0.0
  

• feat(mobile): add Security Misconfiguration

  Mobile
  #1118·SeanDuggan opened Nov 8, 2026Member·

  ·

  · 4.0.0
  

• ci: remove broken host-MySQL step from integration-tests

  #1115·HusainMain opened Nov 4, 2026·

  ·
  1

  

• build(deps): bump zensical from 0.0.73 to 0.0.74

  dependenciespython:uv
  #1112·dependabot[bot] opened Nov 4, 2026Bot·

  ·

• build(deps): bump astral-sh/setup-uv from 10.3.2 to 10.3.3

  dependenciesgithub_actions
  #1111·dependabot[bot] opened Nov 4, 2026Bot·

  ·

• build(deps-dev): bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.3 to 3.7.0

  dependenciesjava
  #1110·dependabot[bot] opened Nov 4, 2026Bot·

  ·

• feat(mobile): add lesson-only modules (Insecure Authorization, Supply Chain, Input Validation, Privacy Controls)

  Mobile
  #1109·SeanDuggan opened Nov 2, 2026Member·

  ·

  · 4.0.0
  

• feat(mobile): add Insufficient Crypto lesson and challenges to the Android app- #1069

  Mobile
  #1107·SeanDuggan opened Nov 2, 2026Member·

  ·

  · 4.0.0
  

• feat(mobile): add Reverse Engineering lesson and challenges to the Android app

  Mobile
  #1106·SeanDuggan opened Nov 1, 2026Member·

  ·

  · 4.0.0
  

• feat(mobile): add Poor Authentication lesson and challenges to the Android app- #1069

  Mobile
  #1105·SeanDuggan opened Nov 1, 2026Member·

  ·

  · 4.0.0
  

• feat(mobile): add Insecure Data Storage lesson and challenges to the Android app

  Mobile
  #1104·SeanDuggan opened Nov 1, 2026Member·

  ·

  · 4.0.0
  

• Move DatabaseLifecycleListener DB tests to integration suite

  #1098·sarthakdev143-lite opened Nov 1, 2026·

  ·

  · 4.0.1
  1

• bugfix: repairing because after hit 1 time, connection in mongodb already disconnect

  #1093·rizal-mujahiddan opened Oct 30, 2026·

  ·

• Fix connection pool deadlock in DirectObjectBankLogin

  #1092·utafrali opened Oct 29, 2026·

  ·

  · 4.0.1
  1

• fix: load JDBC driver before DriverManager.getConnection in Setup (#1082)

  #1091·HusainMain opened Oct 29, 2026·

  ·

  · 4.0.1
  1

  3

• fix: replace redundant new String() constructors with literals (#999)

  #1090·HusainMain opened Oct 29, 2026·

  ·

  · 4.1.0
  1

• build(deps-dev): bump org.apache.maven.plugins:maven-failsafe-plugin from 3.6.0 to 3.6.1

  dependenciesjava
  #1078·dependabot[bot] opened Oct 26, 2026Bot·

  ·

  · 4.0.1

• build(deps-dev): bump org.apache.maven.plugins:maven-surefire-plugin from 3.6.0 to 3.6.1

  dependenciesjava
  #1077·dependabot[bot] opened Oct 26, 2026Bot·

  ·

  · 4.0.1

• feat(mobile): add Client-Side Injection lesson and challenges to the Android app

  Mobile
  #1069·SeanDuggan opened Oct 26, 2026Member·

  ·

  · 4.0.0
  5

  

• feat(mobile): android app shell

  Mobile
  #1068·SeanDuggan opened Oct 26, 2026Member·

  ·

  · 4.0.0
  9

  

• feat(mobile): rename mobile modules and update cheatsheets for tested…

  Mobile
  #1065·SeanDuggan opened Oct 26, 2026Member·

  ·

  · 4.0.0
  5

  

• feat(mobile): add Mobile* servlets for the unified Android app

  Platform
  #1062·SeanDuggan opened Oct 26, 2026Member·

  ·

  · 4.0.0
  10

  

• ci: push images to Docker Hub through its OIDC connection (part of #865)

  Distributiongithub_actionsNeeds Manual Testing
  #1060·ismisepaul opened Oct 25, 2026Member·

  ·

  · 4.0.0
  3

• docs: the Docker Compose setup is a quick start, not a production deployment (#1020)

  DistributionDocumentation
  #1021·ismisepaul opened Oct 25, 2026Member·

  ·

  · 4.0.0
  1

  8

• fix: NoSQL Injection 1 no longer closes the shared MongoClient (#992)

  BugLevelsNeeds Manual Testing
  #1019·ismisepaul opened Oct 25, 2026Member·

  ·

  · 4.0.0
  1