Download Latest Version
1.13.5_ java CLIs source code.zip (77.1 MB)
Get an email when there's a new version of OWASP WrongSecrets
| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| README.md | 2026-03-24 | 3.0 kB | |
| V1.13.2 _ Challenge62 - more MCP fun source code.tar.gz | 2026-03-24 | 27.4 MB | |
| V1.13.2 _ Challenge62 - more MCP fun source code.zip | 2026-03-24 | 27.8 MB | |
| Totals: 3 Items | 55.2 MB | 0 | |
What's Changed
In this release, we added challenge62 and had a few LCM updates:
New content and bugfixes
- fix: add --root-dir for lychee-action v2.8.0 root-relative link resolution by @Copilot in https://github.com/OWASP/wrongsecrets/pull/2444
- Update lycheeverse/lychee-action action to v2.8.0 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2422
- Improved instructions challege 60 when using it online by @commjoen in https://github.com/OWASP/wrongsecrets/pull/2445
- Add Challenge 62: MCP privilege escalation via Google Service Account on Google Drive by @Copilot in https://github.com/OWASP/wrongsecrets/pull/2464
LCM updates
- chore(deps): update dependency @eslint/eslintrc to v3.3.5 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2448
- chore(deps): update dependency @commitlint/config-conventional to v20.5.0 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2447
- fix(deps): update dependency org.projectlombok:lombok to v1.18.44 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2455
- fix(deps): update aws-java-sdk-v2 monorepo to v2.42.13 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2454
- fix(deps): update dependency io.netty:netty-bom to v4.2.10.final by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2433
- chore(deps): update pre-commit hook eslint/eslint to v9.39.4 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2453
- chore(deps): update dependency maven to v3.9.14 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2452
- chore(deps): update dependency io.gatling:gatling-maven-plugin to v4.21.3 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2451
- chore(deps): update dependency eslint to v9.39.4 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2449
- chore(deps): update dependency go to v1.26.1 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2450
- Bump google.golang.org/grpc from 1.79.1 to 1.79.3 in /azure by @dependabot[bot] in https://github.com/OWASP/wrongsecrets/pull/2456
- Bump org.springframework.security:spring-security-web from 7.0.3 to 7.0.4 by @dependabot[bot] in https://github.com/OWASP/wrongsecrets/pull/2458
- fix(deps): update dependency org.springframework.security:spring-security-web to v7.0.4 [security] by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2459
- Bump flatted from 3.3.3 to 3.4.2 in /src/test/K8s-tests by @dependabot[bot] in https://github.com/OWASP/wrongsecrets/pull/2460
- Upgrade juice-shop-ctf-cli instructions to v12 and add /api/Hints endpoint by @Copilot in https://github.com/OWASP/wrongsecrets/pull/2462
- Bump flatted from 3.3.3 to 3.4.2 by @dependabot[bot] in https://github.com/OWASP/wrongsecrets/pull/2465
- Bump flatted from 3.3.3 to 3.4.2 in /src/test/e2e by @dependabot[bot] in https://github.com/OWASP/wrongsecrets/pull/2468
Full Changelog: https://github.com/OWASP/wrongsecrets/compare/1.13.1...1.13.2
