Download Latest Version
1.13.5_ java CLIs source code.zip (77.1 MB)
Get an email when there's a new version of OWASP WrongSecrets
| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| README.md | 2026-03-07 | 10.3 kB | |
| V1.13.1_ Spring boot 4 _ challenge 60 + 61 source code.tar.gz | 2026-03-07 | 27.5 MB | |
| V1.13.1_ Spring boot 4 _ challenge 60 + 61 source code.zip | 2026-03-07 | 27.8 MB | |
| Totals: 3 Items | 55.3 MB | 0 | |
What's Changed
This is a new big release, where we migrated to spring boot 4.0 and added 2 new exciting challenges involving MCP Servers and Telegram! We are super thrilled to present you this release!
Here is what changed:
Bugfixes and new content:
- Small fixes: fixed netty version mismatch and fixed dark mode collerization of challenge-additional uis by @commjoen in https://github.com/OWASP/wrongsecrets/pull/2397
- Update JetBrains logo and link in README by @commjoen in https://github.com/OWASP/wrongsecrets/pull/2404
- Upgrade Spring Boot from 3.5.x to 4.0.3 by @Copilot in https://github.com/OWASP/wrongsecrets/pull/2408
- Revise actuator hardening guidance for production by @commjoen in https://github.com/OWASP/wrongsecrets/pull/2423
- Fix conflicting AWS provider version constraints in Terraform by @Copilot in https://github.com/OWASP/wrongsecrets/pull/2425
- feat: Add Challenge 60 — insecure MCP server with prompt injection leaking env var secrets by @Copilot in https://github.com/OWASP/wrongsecrets/pull/2400
- Implement Spring Boot 4 adoption checklist: Priority 0 migrations by @Copilot in https://github.com/OWASP/wrongsecrets/pull/2430
- Feature fix arcane by @commjoen in https://github.com/OWASP/wrongsecrets/pull/2437
- Add Challenge61: Telegram Channel Secrets with Real API Integration by @Copilot in https://github.com/OWASP/wrongsecrets/pull/2206
- [WIP] Improve challenge61 and optimize Heroku CDS usage by @Copilot in https://github.com/OWASP/wrongsecrets/pull/2439
- Improve challenge61 and heroku cds usage by @commjoen in https://github.com/OWASP/wrongsecrets/pull/2438
- docs: update challenge counts, ranges, and version references to current state by @Copilot in https://github.com/OWASP/wrongsecrets/pull/2441
LCM:
- chore(deps): update pre-commit by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2366
- build(deps): bump urllib3 from 2.6.0 to 2.6.3 in /scripts/sort_contibutors by @dependabot[bot] in https://github.com/OWASP/wrongsecrets/pull/2367
- fix(deps): update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v2.8.15 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2364
- fix(deps): update dependency org.springframework.boot:spring-boot-starter-parent to v3.5.9 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2363
- build(deps): bump qs and @cypress/request in /src/test/K8s-tests by @dependabot[bot] in https://github.com/OWASP/wrongsecrets/pull/2369
- chore(deps): update pre-commit hook renovatebot/pre-commit-hooks to v42.84.0 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2372
- chore(deps): update dependency @commitlint/config-conventional to v20.3.1 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2365
- fix(deps): update dependency com.google.cloud:spring-cloud-gcp-dependencies to v7.4.2 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2362
- chore(deps): update frontend dependencies to v7.28.6 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2371
- chore(deps): update dependency maven to v3.9.12 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2359
- chore(deps): update dependency org.testcontainers:testcontainers to v1.21.4 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2361
- build(deps): bump lodash from 4.17.21 to 4.17.23 in /src/test/K8s-tests by @dependabot[bot] in https://github.com/OWASP/wrongsecrets/pull/2376
- build(deps): bump lodash from 4.17.21 to 4.17.23 in /src/test/e2e by @dependabot[bot] in https://github.com/OWASP/wrongsecrets/pull/2375
- build(deps): bump diff from 5.2.0 to 5.2.2 in /src/test/K8s-tests by @dependabot[bot] in https://github.com/OWASP/wrongsecrets/pull/2374
- chore(deps): update dependency org.codehaus.mojo:exec-maven-plugin to v3.6.3 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2360
- chore(deps): update dependency io.gatling:gatling-maven-plugin to v4.20.16 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2358
- chore(deps): update dependency eslint-plugin-cypress to v5.2.1 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2370
- build(deps): bump qs and @cypress/request in /src/test/e2e by @dependabot[bot] in https://github.com/OWASP/wrongsecrets/pull/2373
- build(deps): bump diff from 5.2.0 to 5.2.2 in /src/test/e2e by @dependabot[bot] in https://github.com/OWASP/wrongsecrets/pull/2377
- chore(deps): update dependency @babel/preset-env to v7.29.0 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2381
- chore(deps): update dependency @commitlint/config-conventional to v20.4.1 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2382
- fix(deps): update dependency org.springframework.boot:spring-boot-starter-parent to v3.5.10 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2380
- chore(deps): update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.15.0 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2385
- chore(deps): update dependency com.diffplug.spotless:spotless-maven-plugin to v3.2.1 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2383
- fix(deps): update dependency com.google.cloud:spring-cloud-gcp-dependencies to v7.4.3 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2379
- fix(deps): update dependency com.google.cloud:spring-cloud-gcp-dependencies to v7.4.5 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2388
- chore(deps): update pre-commit by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2393
- chore(deps): update eslint by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2390
- chore(deps): update dependency io.github.wimdeblauwe:testcontainers-cypress to v1.10.0 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2394
- chore(deps): update docker/dockerfile docker tag to v1.21 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2392
- build(deps-dev): bump qs from 6.14.1 to 6.14.2 in /src/test/K8s-tests by @dependabot[bot] in https://github.com/OWASP/wrongsecrets/pull/2387
- build(deps-dev): bump qs from 6.14.1 to 6.14.2 in /src/test/e2e by @dependabot[bot] in https://github.com/OWASP/wrongsecrets/pull/2395
- fix(deps): update jruby.version to v10.0.3.0 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2389
- chore(deps): update dependency go to v1.26.0 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2378
- chore(deps): update dependency io.gatling:gatling-maven-plugin to v4.21.0 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2384
- [WIP] Update dependency minimatch to version 10.2.2 by @Copilot in https://github.com/OWASP/wrongsecrets/pull/2396
- fix(deps): update dependency org.webjars:datatables to v2.3.7 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2347
- chore(deps): update dependency minimatch to v10.2.2 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2391
- build(deps): bump minimatch in /src/test/e2e by @dependabot[bot] in https://github.com/OWASP/wrongsecrets/pull/2401
- build(deps-dev): bump minimatch from 3.1.2 to 10.2.3 in /js by @dependabot[bot] in https://github.com/OWASP/wrongsecrets/pull/2402
- build(deps-dev): bump minimatch from 3.1.2 to 3.1.5 by @dependabot[bot] in https://github.com/OWASP/wrongsecrets/pull/2405
- Update pom.xml with version bumps and better centralized version tracking by @commjoen in https://github.com/OWASP/wrongsecrets/pull/2406
- build(deps): bump minimatch in /src/test/K8s-tests by @dependabot[bot] in https://github.com/OWASP/wrongsecrets/pull/2409
- chore(deps): update module go.opentelemetry.io/otel/sdk to v1.40.0 [security] by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2411
- build(deps): bump minimatch in /src/test/e2e by @dependabot[bot] in https://github.com/OWASP/wrongsecrets/pull/2412
- Fix pre-commit pipeline: replace broken trivy installation with apt-based install by @Copilot in https://github.com/OWASP/wrongsecrets/pull/2420
- chore(deps): update dependency @commitlint/config-conventional to v20.4.2 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2413
- chore(deps): update dependency org.apache.maven.plugins:maven-dependency-plugin to v3.10.0 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2421
- chore(deps): update dependency @eslint/eslintrc to v3.3.4 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2414
- chore(deps): update dependency minimatch to v10.2.4 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2415
- chore(deps): update dependency org.apache.maven.plugins:maven-surefire-plugin to v3.5.5 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2416
- chore(deps): update dependency com.puppycrawl.tools:checkstyle to v13.3.0 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2418
- fix(deps): update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v3.0.2 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2417
- update aws version tf provider by @commjoen in https://github.com/OWASP/wrongsecrets/pull/2426
- chore(deps): update terraform azurerm to v4.62.0 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2427
- chore(deps): update terraform random to ~> 3.8.0 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2428
- chore(deps): update terraform-aws by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2431
- chore(deps): update terraform-gcp to ~> 7.21.0 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2432
- chore(deps): update dependency globals to v17 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2436
- fix(deps): update go by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2434
- chore(deps): update dependency com.github.eirslett:frontend-maven-plugin to v2 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2435
Thank you
We would like to thank @bendehaan , @commjoen (and @copilot ;-) ) for their hard work on this release
Full Changelog: https://github.com/OWASP/wrongsecrets/compare/1.12.10...1.13.1
