Download Latest Version
V1.14.0_ Major upgrade with AI source code.zip (77.3 MB)
Add to Preferred Sources
| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| README.md | 2026-09-22 | 17.4 kB | |
| V1.14.0_ Major upgrade with AI source code.tar.gz | 2026-09-22 | 77.0 MB | |
| V1.14.0_ Major upgrade with AI source code.zip | 2026-09-22 | 77.3 MB | |
| Totals: 3 Items | 154.3 MB | 1 | |
What's Changed
This release is action packed with 4 new challenges, Java26, Node26 and much more! Have fun with it!
New content and challenges
- Feature/challenge68: shared chatgpt chat by @commjoen in https://github.com/OWASP/wrongsecrets/pull/2646
- feat(challenges): add challenges 70 and 71 with AI agent skills by @kekubhai in https://github.com/OWASP/wrongsecrets/pull/2647
- Feature/scandevctontainer by @commjoen in https://github.com/OWASP/wrongsecrets/pull/2667
- Fix devcontainer CI base-image resolution in Build and scan jobs by @commjoen with @Copilot in https://github.com/OWASP/wrongsecrets/pull/2668
- feat(challenges): add AI coding-agent transcript challenge by @kekubhai in https://github.com/OWASP/wrongsecrets/pull/2660
- feat(docker): introduce Java 26 dev/build container and build-secret challenge 71 by @sandeshkuldharme1 in https://github.com/OWASP/wrongsecrets/pull/2650
- Feature/build dev container by @commjoen in https://github.com/OWASP/wrongsecrets/pull/2665
- feat: add cloud log secret leakage challenge (#345) by @Jeffy123-zhu in https://github.com/OWASP/wrongsecrets/pull/2638
Bugfixes
- Fix GCP deployment documentation typo by @bte808 in https://github.com/OWASP/wrongsecrets/pull/2549
- fix: exclude false-positive and broken links from dead link checker by @commjoen with @Copilot in https://github.com/OWASP/wrongsecrets/pull/2563
- fix: align maven compiler plugin configuration and docs with Java 26 by @SatyamPandey-07 in https://github.com/OWASP/wrongsecrets/pull/2649
- fix: align Spring Boot version property and adoption checklist with Java 26 and Boot 4.1.1 by @SatyamPandey-07 in https://github.com/OWASP/wrongsecrets/pull/2652
- fix: bump to k8s 1.36 by @bendehaan in https://github.com/OWASP/wrongsecrets/pull/2659
- fix: extract maven-dependency-plugin property and synchronize version management docs by @SatyamPandey-07 in https://github.com/OWASP/wrongsecrets/pull/2662
- css fixes for snippets by @commjoen in https://github.com/OWASP/wrongsecrets/pull/2658
- cleanup challenge 71 by @commjoen in https://github.com/OWASP/wrongsecrets/pull/2679
- Hotfix rc6 by @commjoen in https://github.com/OWASP/wrongsecrets/pull/2680
LCM
- chore(deps-dev): bump tmp from 0.2.5 to 0.2.7 in /src/test/K8s-tests by @dependabot[bot] in https://github.com/OWASP/wrongsecrets/pull/2544
- Update dependency maven to v3.9.16 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2547
- chore(deps): bump qs and cypress in /src/test/e2e by @dependabot[bot] in https://github.com/OWASP/wrongsecrets/pull/2550
- Update maven-surefire-plugin.version to v3.5.6 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2548
- Update gatling-maven-plugin.version to v4.21.7 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2545
- Update gatling.version to v3.15.1 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2546
- chore(deps-dev): bump tmp from 0.2.4 to 0.2.7 in /src/test/e2e by @dependabot[bot] in https://github.com/OWASP/wrongsecrets/pull/2543
- Update alpine Docker tag to v3.24 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2555
- Update aws-java-sdk-v2 monorepo to v2.46.15 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2556
- chore(deps-dev): bump @babel/core from 7.28.0 to 7.29.7 by @dependabot[bot] in https://github.com/OWASP/wrongsecrets/pull/2562
- chore(deps): bump qs and cypress in /src/test/K8s-tests by @dependabot[bot] in https://github.com/OWASP/wrongsecrets/pull/2560
- Update checkstyle.version by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2558
- Update go toolchain directive to v1.26.4 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2553
- Update frontend-maven-plugin.version by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2552
- Update azure-sdk-for-java monorepo by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2557
- chore(deps-dev): bump form-data from 4.0.5 to 4.0.6 in /src/test/e2e by @dependabot[bot] in https://github.com/OWASP/wrongsecrets/pull/2561
- chore(deps): bump js-yaml from 4.1.1 to 4.2.0 in /src/test/K8s-tests by @dependabot[bot] in https://github.com/OWASP/wrongsecrets/pull/2559
- chore(deps): bump js-yaml from 4.1.1 to 4.3.0 in /src/test/e2e by @dependabot[bot] in https://github.com/OWASP/wrongsecrets/pull/2571
- Update module golang.org/x/net to v0.55.0 [SECURITY] by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2570
- Update dependency com.diffplug.spotless:spotless-maven-plugin to v3.8.0 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2568
- Update eslint by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2567
- Update dependency org.cyclonedx:cyclonedx-maven-plugin to v2.9.2 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2566
- Update aws-java-sdk-v2 monorepo to v2.46.21 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2565
- chore(deps-dev): bump js-yaml from 4.1.1 to 4.3.0 by @dependabot[bot] in https://github.com/OWASP/wrongsecrets/pull/2564
- Update dependency org.webjars:datatables to v2.3.8 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2551
- Update dependency org.springframework.cloud:spring-cloud-dependencies to v2025.1.2 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2554
- chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 in /aws by @dependabot[bot] in https://github.com/OWASP/wrongsecrets/pull/2572
- chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 in /azure by @dependabot[bot] in https://github.com/OWASP/wrongsecrets/pull/2573
- Update module golang.org/x/crypto to v0.52.0 [SECURITY] by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2574
- Update dependency @eslint/eslintrc to v3.3.6 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2575
- Update dependency eslint to v9.39.5 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2576
- Update go toolchain directive to v1.26.5 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2578
- Update dependency org.apache.maven.plugins:maven-dependency-plugin to v3.11.0 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2584
- Update dependency org.springframework.boot:spring-boot-starter-parent to v4.1.0 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2586
- Update dependency com.github.spotbugs:spotbugs-maven-plugin to v4.10.3.0 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2580
- Update Frontend Dependencies to v7.29.7 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2589
- Update aws-java-sdk-v2 monorepo to v2.48.3 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2579
- Update dependency com.google.cloud:libraries-bom to v26.85.1 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2581
- Update dependency org.cyclonedx:cyclonedx-core-java to v12.2.0 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2585
- Update dependency com.puppycrawl.tools:checkstyle to v13.8.0 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2582
- Update dependency io.gatling:gatling-maven-plugin to v4.21.9 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2577
- Update dependency org.springframework.vault:spring-vault-core to v4.1.0 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2587
- Update docker/dockerfile Docker tag to v1.25 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2588
- Update dependency globals to v17.7.0 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2583
- Update dependency io.gatling:gatling-maven-plugin to v4.21.10 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2593
- Update dependency org.cyclonedx:cyclonedx-maven-plugin to v2.9.3 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2595
- Update aws-java-sdk-v2 monorepo to v2.50.3 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2596
- Update dependency globals to v17.9.0 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2601
- Update dependency com.puppycrawl.tools:checkstyle to v13.9.0 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2600
- Update dependency com.google.cloud:libraries-bom to v26.86.0 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2599
- Update dependency com.diffplug.spotless:spotless-maven-plugin to v3.9.0 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2598
- Update dependency minimatch to v10.2.6 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2594
- chore(deps-dev): bump fast-uri from 3.1.2 to 3.1.5 in /js by @dependabot[bot] in https://github.com/OWASP/wrongsecrets/pull/2603
- chore(deps-dev): bump brace-expansion from 1.1.13 to 1.1.18 in /src/test/K8s-tests by @dependabot[bot] in https://github.com/OWASP/wrongsecrets/pull/2602
- Update dependency com.github.eirslett:frontend-maven-plugin to v2.0.2 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2592
- chore(deps): bump brace-expansion from 1.1.12 to 1.1.18 in /js by @dependabot[bot] in https://github.com/OWASP/wrongsecrets/pull/2605
- Update dependency com.azure.spring:spring-cloud-azure-dependencies to v7.4.0 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2597
- chore(deps): bump js-yaml from 4.3.0 to 4.3.1 in /src/test/e2e by @dependabot[bot] in https://github.com/OWASP/wrongsecrets/pull/2604
- chore(deps-dev): bump brace-expansion from 1.1.13 to 1.1.18 in /src/test/e2e by @dependabot[bot] in https://github.com/OWASP/wrongsecrets/pull/2607
- chore(deps): bump uuid and mochawesome in /src/test/e2e by @dependabot[bot] in https://github.com/OWASP/wrongsecrets/pull/2606
- chore(deps): bump js-yaml from 4.2.0 to 4.3.1 in /src/test/K8s-tests by @dependabot[bot] in https://github.com/OWASP/wrongsecrets/pull/2608
- Update to node 26 and java 26 by @commjoen with @Copilot in https://github.com/OWASP/wrongsecrets/pull/2609
- chore(deps): bump org.springframework.security:spring-security-web from 7.0.5 to 7.0.6 by @dependabot[bot] in https://github.com/OWASP/wrongsecrets/pull/2610
- Update dependency org.springframework.security:spring-security-web to v7.0.6 [SECURITY] by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2611
- adding nvd api key to env var in actions to speed up the work by @commjoen in https://github.com/OWASP/wrongsecrets/pull/2612
- Update go toolchain directive to v1.26.6 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2613
- Update Terraform http to v3.6.1 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2614
- Update aws-java-sdk-v2 monorepo to v2.53.1 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2615
- Update dependency com.puppycrawl.tools:checkstyle to v13.11.0 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2616
- Update pre-commit by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2624
- Update go by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2621
- Update docker/dockerfile Docker tag to v1.26 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2620
- Update dependency com.tngtech.archunit:archunit-junit5 to v1.5.0 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2617
- Update lycheeverse/lychee-action action to v2.9.0 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2623
- Update jruby.version to v10.1.1.0 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2622
- Update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v3.1.0 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2619
- Update spotbugs.version to v4.10.3 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2625
- Update dependency globals to v17.11.0 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2618
- Update .lycheeignore to include Slack URL by @commjoen in https://github.com/OWASP/wrongsecrets/pull/2626
- Update dependency com.github.spotbugs:spotbugs-maven-plugin to v4.10.4.0 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2627
- Update dependency io.gatling:gatling-maven-plugin to v4.21.11 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2628
- Update dependency org.springframework.boot:spring-boot-starter-parent to v4.1.1 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2629
- Update dependency org.springframework.cloud:spring-cloud-dependencies to v2025.1.3 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2630
- Update spotbugs.version to v4.10.4 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2631
- Update aws-java-sdk-v2 monorepo to v2.54.9 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2632
- fix precommit by @commjoen in https://github.com/OWASP/wrongsecrets/pull/2637
- Update dependency com.google.cloud:libraries-bom to v26.87.0 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2634
- Update dependency globals to v17.12.0 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2636
- Update dependency com.diffplug.spotless:spotless-maven-plugin to v3.10.1 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2633
- Update dependency @eslint/eslintrc to v3.3.7 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2635
- chore(deps-dev): bump @humanfs/node from 0.16.6 to 0.16.8 by @dependabot[bot] in https://github.com/OWASP/wrongsecrets/pull/2641
- Update aws-java-sdk-v2 monorepo by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2639
- Update dependency org.projectlombok:lombok to v1.18.48 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2640
- chore(deps-dev): bump browserslist from 4.28.1 to 4.28.8 by @dependabot[bot] in https://github.com/OWASP/wrongsecrets/pull/2643
- chore(deps-dev): bump fast-uri from 3.1.5 to 3.1.7 in /js by @dependabot[bot] in https://github.com/OWASP/wrongsecrets/pull/2642
-
- updated contributors & removed bad contributor code \n - moved las… by @commjoen in https://github.com/OWASP/wrongsecrets/pull/2654
- Beta release by @commjoen in https://github.com/OWASP/wrongsecrets/pull/2655
- chore(deps): bump serialize-javascript and mocha in /src/test/e2e by @dependabot[bot] in https://github.com/OWASP/wrongsecrets/pull/2663
- chore(deps-dev): bump js-yaml from 4.3.1 to 4.3.2 in /src/test/e2e by @dependabot[bot] in https://github.com/OWASP/wrongsecrets/pull/2664
- chore(deps): bump js-yaml from 4.3.1 to 4.3.2 in /src/test/K8s-tests by @dependabot[bot] in https://github.com/OWASP/wrongsecrets/pull/2666
- Update dependency com.diffplug.spotless:spotless-maven-plugin to v3.10.2 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2670
- Update aws-java-sdk-v2 monorepo to v2.54.18 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2669
- Update dependency com.github.spotbugs:spotbugs-maven-plugin to v4.10.4.1 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2671
- Update dependency io.gatling:gatling-maven-plugin to v4.21.12 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2672
- Update dependency org.codehaus.mojo:exec-maven-plugin to v3.6.4 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2673
- Update dependency org.codehaus.mojo:tidy-maven-plugin to v1.4.1 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2674
- Update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v3.1.1 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2675
- Update go - autoclosed by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2676
- Update Terraform random to v3.9.1 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2678
- Update Terraform http to v3.6.2 by @renovate[bot] in https://github.com/OWASP/wrongsecrets/pull/2677
- rc7 release by @commjoen in https://github.com/OWASP/wrongsecrets/pull/2681
- Rc8 by @commjoen in https://github.com/OWASP/wrongsecrets/pull/2682
- Install Cypress binary in minikube Vault challenge workflow by @commjoen with @Copilot in https://github.com/OWASP/wrongsecrets/pull/2683
- update docs: challenge numbers and contributors by @commjoen in https://github.com/OWASP/wrongsecrets/pull/2684
- Build release by @commjoen in https://github.com/OWASP/wrongsecrets/pull/2686
New Contributors
- @bte808 made their first contribution in https://github.com/OWASP/wrongsecrets/pull/2549
- @SatyamPandey-07 made their first contribution in https://github.com/OWASP/wrongsecrets/pull/2649
- @kekubhai made their first contribution in https://github.com/OWASP/wrongsecrets/pull/2647
- @sandeshkuldharme1 made their first contribution in https://github.com/OWASP/wrongsecrets/pull/2650
- @Jeffy123-zhu made their first contribution in https://github.com/OWASP/wrongsecrets/pull/2638
Special Thanks
We would like to thank @bte808 , @SatyamPandey-07 , @kekubhai , @sandeshkuldharme1 , @Jeffy123-zhu , @bendehaan , @commjoen for their hard work on this release.
Full Changelog: https://github.com/OWASP/wrongsecrets/compare/v1.13.5...v1.14.0
