Download Latest Version juice-shop-20.2.0_node26_darwin_arm64.zip (125.8 MB)
Email in envelope

Get an email when there's a new version of OWASP Juice Shop

Home / v20.2.0
Name Modified Size InfoDownloads / Week
Parent folder
juice-shop-20.2.0_node22_win32_x64.zip 2026-08-10 126.2 MB
juice-shop-20.2.0_node22_win32_x64.zip.md5 2026-08-10 32 Bytes
juice-shop-20.2.0_node26_win32_x64.zip 2026-08-10 121.6 MB
juice-shop-20.2.0_node26_win32_x64.zip.md5 2026-08-10 32 Bytes
juice-shop-20.2.0_node24_win32_x64.zip 2026-08-10 126.2 MB
juice-shop-20.2.0_node24_win32_x64.zip.md5 2026-08-10 32 Bytes
juice-shop-20.2.0_node26_darwin_arm64.zip 2026-08-10 125.8 MB
juice-shop-20.2.0_node26_darwin_arm64.zip.md5 2026-08-10 32 Bytes
juice-shop-20.2.0_node22_darwin_arm64.zip 2026-08-10 130.4 MB
juice-shop-20.2.0_node22_darwin_arm64.zip.md5 2026-08-10 32 Bytes
juice-shop-20.2.0_node24_darwin_arm64.zip 2026-08-10 130.4 MB
juice-shop-20.2.0_node24_darwin_arm64.zip.md5 2026-08-10 32 Bytes
juice-shop-20.2.0_node26_linux_x64.tgz 2026-08-10 96.3 MB
juice-shop-20.2.0_node26_linux_x64.tgz.md5 2026-08-10 32 Bytes
juice-shop-20.2.0_node24_linux_x64.tgz 2026-08-10 99.7 MB
juice-shop-20.2.0_node24_linux_x64.tgz.md5 2026-08-10 32 Bytes
juice-shop-20.2.0_node22_linux_x64.tgz 2026-08-10 99.7 MB
juice-shop-20.2.0_node22_linux_x64.tgz.md5 2026-08-10 32 Bytes
juice-shop-20.2.0_node26_linux_arm64.tgz 2026-08-10 95.3 MB
juice-shop-20.2.0_node26_linux_arm64.tgz.md5 2026-08-10 32 Bytes
juice-shop-20.2.0_node24_linux_arm64.tgz 2026-08-10 98.7 MB
juice-shop-20.2.0_node24_linux_arm64.tgz.md5 2026-08-10 32 Bytes
juice-shop-20.2.0_node22_linux_arm64.tgz 2026-08-10 98.7 MB
juice-shop-20.2.0_node22_linux_arm64.tgz.md5 2026-08-10 32 Bytes
README.md 2026-08-10 2.3 kB
v20.2.0 source code.tar.gz 2026-08-10 17.0 MB
v20.2.0 source code.zip 2026-08-10 17.7 MB
Totals: 27 Items   1.4 GB 140

🅰️ Frontend

  • Updated frontend to Angular 22.x and Angular Material 22.x
  • Updated TypeScript to 6.0.x
  • Updated angular-eslint to 22.x
  • Switched QR code library from ng-qrcode to angularx-qrcode
  • 2734b6ad9: Removed deprecated @angular/platform-browser-dynamic dependency

🎯 Challenges

  • 03645895e: Harmonized challenge name capitalization (e.g., "Exposed credentials" → "Exposed Credentials")
  • Added ⭐⭐-challenge "Misplaced IaC Files"
  • Added ⭐⭐⭐⭐-challenge "Login Cloud Admin" (including coding challenge)
  • Added ⭐⭐⭐-challenge "Vulnerable Infrastructure" (including coding challenge)
  • 68815f2a7: Updated mitigation URLs for IaC-related challenges
  • d832137b1: Supported n-gram in similarity checks for "System Prompt Extraction" (#3515)
  • Disabled dangerous "Deprecated Interface" challenge on Docker/Heroku by default
  • Added missing guard around dangerous "Local File Read" challenge

🎨 User Interface

  • 8c92a2058: Added role field and deluxe membership link to user profile page

🕵️ Cheat Detection

  • b55fe2977: Added cheat detection for source file overlap in challenge submissions using Dice Coefficient

🌐 I18N

  • Updated server-side I18N base strings and backend translations

🧹 Technical Debt Reduction

  • 3acae4030: Fixed TypeScript 6.0 deprecations
  • 4a33cd421: Properly adopted test mocks for angularx-qrcode
  • 27cccf771: Removed GitPod references entirely
  • e3343c50b: Updated @types/node to v26.x
  • Added allowScripts configuration to package.json and frontend/package.json
  • b66bec35c: Refactored file path handling to also work on Windows
  • 68a9a1d65: Optimized i18n handling by disabling file restoration during test suite runs
  • a92bafc11: Removed contradictions and fluff from challenge descriptions
  • 42149e0aa: Moved terraform routes out of existing vulnerable code snippet markers

🏗️ Build Process

  • 7fa7ad76e: Replaced Grunt with a custom packaging script (scripts/package.mjs)
  • df1b6bbd8: Extracted draft release creation from packaging pipeline into separate workflow step

⚙️ DevOps Automation

  • Updated CI/CD pipelines to use new packaging script instead of Grunt
Source: README.md, updated 2026-08-10