Issues

• json-simple 1.1.1 pulls JUnit 4.10 + hamcrest-core 1.1 into compile scope (and the WAR), breaking Hamcrest 3 assertion messages

  OWASP/SecurityShepherd#944 · Filter by author ismisepaul opened on Oct 22, 2026

• it-test profile tags its Mongo build as mongo:${MONGODB_VERSION}, breaking the next local IT run

  OWASP/SecurityShepherd#938 · Filter by author ismisepaul opened on Oct 22, 2026

• Validate.validateLanguage rejects every two-letter language code, so module i18n always falls back to en_GB

  OWASP/SecurityShepherd#937 · Filter by author ismisepaul opened on Oct 22, 2026

• [BUG] SQL Injection Challenges 1,2,3,4 and 5 Stop Working After Several Queries

  Bug
  Bug

  OWASP/SecurityShepherd#931 · Filter by author LucaBonamino opened on Oct 8, 2026

• Test New Mobile Privacy Controls Levels

  LevelsMobile
  Feature

  OWASP/SecurityShepherd#930 · Filter by author SeanDuggan opened on Sep 20, 2026
  

• Test New Mobile Input Validation

  LevelsMobile
  Feature

  OWASP/SecurityShepherd#929 · Filter by author SeanDuggan opened on Sep 20, 2026
  

• Test New Mobile Security Misconfiguration Levels

  LevelsMobile
  Feature

  OWASP/SecurityShepherd#928 · Filter by author SeanDuggan opened on Sep 20, 2026
  

• Test New Mobile Insecure Crypto Levels

  LevelsMobile
  Feature

  OWASP/SecurityShepherd#927 · Filter by author SeanDuggan opened on Sep 20, 2026
  

• Test New Mobile Insecure Communication Levels

  LevelsMobile
  Feature

  OWASP/SecurityShepherd#926 · Filter by author SeanDuggan opened on Sep 20, 2026
  

• Test New Supply Chain Security Levels

  LevelsMobile
  Feature

  OWASP/SecurityShepherd#925 · Filter by author SeanDuggan opened on Sep 20, 2026
  

• Test New Mobile Insecure Authorization Levels

  LevelsMobile
  Feature

  OWASP/SecurityShepherd#924 · Filter by author SeanDuggan opened on Sep 20, 2026
  

• Test New Mobile Poor Authentication Lessons/Challenges

  LevelsMobile
  Feature

  OWASP/SecurityShepherd#923 · Filter by author SeanDuggan opened on Sep 20, 2026
  

• Test New Mobile Reverse Engineering Lessons/Challenges

  LevelsMobile
  Feature

  OWASP/SecurityShepherd#922 · Filter by author SeanDuggan opened on Sep 20, 2026
  

• Test New Mobile Client Side Injection Lessons/Challenges

  LevelsMobile
  Feature

  OWASP/SecurityShepherd#921 · Filter by author SeanDuggan opened on Sep 20, 2026
  

• Replace iframes on Web Application

  EnhancementHelp WantedPlatform
  Feature

  OWASP/SecurityShepherd#914 · Filter by author SeanDuggan opened on Aug 28, 2026
  4

  

• Mobile - Test mobile Lessons + Challenges

  LevelsMobile
  Task

  OWASP/SecurityShepherd#896 · Filter by author SeanDuggan opened on Jun 12, 2026
  

• Mobile - Update JSP pages for all mobile lessons and challenges

  Levels
  Task

  OWASP/SecurityShepherd#895 · Filter by author SeanDuggan opened on Jun 12, 2026
  

• Modernize JSTL taglib URIs to jakarta.tags.* (post-jakarta migration)

  OWASP/SecurityShepherd#880 · Filter by author ismisepaul opened on Jun 5, 2026

• Add test coverage for SLS and ACS SAML auth servlets

  javaTest Automation
  OWASP/SecurityShepherd#879 · Filter by author ismisepaul opened on Jun 4, 2026
  1

• Modernize MongoDatabase off legacy com.mongodb.DB API + Testcontainers; rescue disabled MongoDatabaseIT tests

  EnhancementjavaTest Automation
  OWASP/SecurityShepherd#876 · Filter by author ismisepaul opened on Jun 4, 2026

• ci: least-privilege GITHUB_TOKEN and no long-lived tokens

  OWASP/SecurityShepherd#865 · Filter by author ismisepaul opened on May 31, 2026

• perf: parallelize integration tests via GitHub Actions matrix sharding (4 shards)

  Enhancementgithub_actionsTest Automation
  OWASP/SecurityShepherd#863 · Filter by author ismisepaul opened on May 29, 2026

• Migrate from javax.* (Java EE) to jakarta.* (Jakarta EE 9+) to enable Spring 6 / modern stack

  Enhancementjava
  OWASP/SecurityShepherd#861 · Filter by author ismisepaul opened on May 29, 2026
  3

• Replace inefficient new String() constructors in GetterIT.testSSOAuthExistingUserRelogin

  OWASP/SecurityShepherd#859 · Filter by author ismisepaul opened on May 29, 2026
  2

• Review/dismiss CodeQL double-checked-locking flag on MongoDatabase.baseMongoClient

  OWASP/SecurityShepherd#858 · Filter by author ismisepaul opened on May 29, 2026
  1