Issues

• [BUG] SQL Injection Challenges 1,2,3,4 and 5 Stop Working After Several Queries

  Bug
  Bug

  OWASP/SecurityShepherd#931 · Filter by author LucaBonamino opened on Oct 8, 2026

• Test New Mobile Privacy Controls Levels

  LevelsMobile
  Feature

  OWASP/SecurityShepherd#930 · Filter by author SeanDuggan opened on Sep 20, 2026
  

• Test New Mobile Input Validation

  LevelsMobile
  Feature

  OWASP/SecurityShepherd#929 · Filter by author SeanDuggan opened on Sep 20, 2026
  

• Test New Mobile Security Misconfiguration Levels

  LevelsMobile
  Feature

  OWASP/SecurityShepherd#928 · Filter by author SeanDuggan opened on Sep 20, 2026
  

• Test New Mobile Insecure Crypto Levels

  LevelsMobile
  Feature

  OWASP/SecurityShepherd#927 · Filter by author SeanDuggan opened on Sep 20, 2026
  

• Test New Mobile Insecure Communication Levels

  LevelsMobile
  Feature

  OWASP/SecurityShepherd#926 · Filter by author SeanDuggan opened on Sep 20, 2026
  

• Test New Supply Chain Security Levels

  LevelsMobile
  Feature

  OWASP/SecurityShepherd#925 · Filter by author SeanDuggan opened on Sep 20, 2026
  

• Test New Mobile Insecure Authorization Levels

  LevelsMobile
  Feature

  OWASP/SecurityShepherd#924 · Filter by author SeanDuggan opened on Sep 20, 2026
  

• Test New Mobile Poor Authentication Lessons/Challenges

  LevelsMobile
  Feature

  OWASP/SecurityShepherd#923 · Filter by author SeanDuggan opened on Sep 20, 2026
  

• Test New Mobile Reverse Engineering Lessons/Challenges

  LevelsMobile
  Feature

  OWASP/SecurityShepherd#922 · Filter by author SeanDuggan opened on Sep 20, 2026
  

• Test New Mobile Client Side Injection Lessons/Challenges

  LevelsMobile
  Feature

  OWASP/SecurityShepherd#921 · Filter by author SeanDuggan opened on Sep 20, 2026
  

• Replace iframes on Web Application

  EnhancementHelp WantedPlatform
  Feature

  OWASP/SecurityShepherd#914 · Filter by author SeanDuggan opened on Aug 28, 2026
  4

  

• Mobile - Test mobile Lessons + Challenges

  LevelsMobile
  Task

  OWASP/SecurityShepherd#896 · Filter by author SeanDuggan opened on Jun 12, 2026
  

• Mobile - Update JSP pages for all mobile lessons and challenges

  Levels
  Task

  OWASP/SecurityShepherd#895 · Filter by author SeanDuggan opened on Jun 12, 2026
  

• Modernize JSTL taglib URIs to jakarta.tags.* (post-jakarta migration)

  OWASP/SecurityShepherd#880 · Filter by author ismisepaul opened on Jun 5, 2026

• Add test coverage for SLS and ACS SAML auth servlets

  javaTest Automation
  OWASP/SecurityShepherd#879 · Filter by author ismisepaul opened on Jun 4, 2026
  1

• Modernize MongoDatabase off legacy com.mongodb.DB API + Testcontainers; rescue disabled MongoDatabaseIT tests

  EnhancementjavaTest Automation
  OWASP/SecurityShepherd#876 · Filter by author ismisepaul opened on Jun 4, 2026

• ci: least-privilege GITHUB_TOKEN and no long-lived tokens

  OWASP/SecurityShepherd#865 · Filter by author ismisepaul opened on May 31, 2026

• perf: parallelize integration tests via GitHub Actions matrix sharding (4 shards)

  Enhancementgithub_actionsTest Automation
  OWASP/SecurityShepherd#863 · Filter by author ismisepaul opened on May 29, 2026

• Migrate from javax.* (Java EE) to jakarta.* (Jakarta EE 9+) to enable Spring 6 / modern stack

  Enhancementjava
  OWASP/SecurityShepherd#861 · Filter by author ismisepaul opened on May 29, 2026
  3

• Replace inefficient new String() constructors in GetterIT.testSSOAuthExistingUserRelogin

  OWASP/SecurityShepherd#859 · Filter by author ismisepaul opened on May 29, 2026
  1

• Review/dismiss CodeQL double-checked-locking flag on MongoDatabase.baseMongoClient

  OWASP/SecurityShepherd#858 · Filter by author ismisepaul opened on May 29, 2026

• Convert challenge/lesson servlets to try-with-resources (connection-leak cleanup)

  OWASP/SecurityShepherd#857 · Filter by author ismisepaul opened on May 29, 2026
  1

• Refactor remaining Getter.java JDBC sites to try-with-resources

  OWASP/SecurityShepherd#855 · Filter by author ismisepaul opened on May 29, 2026

• Replace brittle Tomcat server.xml/web.xml patches with a robust mechanism

  OWASP/SecurityShepherd#848 · Filter by author ismisepaul opened on May 29, 2026