SCAGoat is a vulnerable web application that is designed to help security enthusiasts, developers, and students to discover and mitigate security vulnerabilities in their applications. It is a collection of security vulnerabilities and misconfigurations that can be used to test the security tools and applications.
SCAGoat is designed to be used as a learning tool and is not recommended to be used in a production environment.
Marked vulnerability allowing XSS attacks
ReDoS vulnerability in trim-newlines package
Prototype pollution vulnerability in Lodash
Deserialization vulnerability in jackson-databind
XZ-Java compromised library vulnerability
Spring WebSocket vulnerability
Log4Shell vulnerability in Log4j
Command execution vulnerability in node-notifier
Denial of Service vulnerability in Pug
Prototype pollution vulnerability in dot-prop