Open Issues Need Help
View All on GitHub documentation good first issue
kOaDT/oss-oopssec-store kOaDT/oss-oopssec-store Security training for the apps you actually ship. Open your browser and start hacking.
Open project →
26
Security training for the apps you actually ship. Open your browser and start hacking.
TypeScript
#appsec#ctf#cybersecurity#nextjs#owasp-top10#security-training#supply-chain-security#typescript#vulnerable-web-app#xss
docs: correct the Juice Shop rows in the comparison table about 1 month ago
documentation good first issue improvement
kOaDT/oss-oopssec-store kOaDT/oss-oopssec-store Security training for the apps you actually ship. Open your browser and start hacking.
Open project →
26
Security training for the apps you actually ship. Open your browser and start hacking.
TypeScript
#appsec#ctf#cybersecurity#nextjs#owasp-top10#security-training#supply-chain-security#typescript#vulnerable-web-app#xss
ci: publish the CLI to npm with provenance about 1 month ago
good first issue ci
kOaDT/oss-oopssec-store kOaDT/oss-oopssec-store Security training for the apps you actually ship. Open your browser and start hacking.
Open project →
26
Security training for the apps you actually ship. Open your browser and start hacking.
TypeScript
#appsec#ctf#cybersecurity#nextjs#owasp-top10#security-training#supply-chain-security#typescript#vulnerable-web-app#xss
ci: unify the Node version across workflows about 2 months ago
good first issue ci
kOaDT/oss-oopssec-store kOaDT/oss-oopssec-store Security training for the apps you actually ship. Open your browser and start hacking.
Open project →
26
Security training for the apps you actually ship. Open your browser and start hacking.
TypeScript
#appsec#ctf#cybersecurity#nextjs#owasp-top10#security-training#supply-chain-security#typescript#vulnerable-web-app#xss
docs: remove hardcoded framework versions from AGENTS.md and Cursor rules about 2 months ago
documentation good first issue
kOaDT/oss-oopssec-store kOaDT/oss-oopssec-store Security training for the apps you actually ship. Open your browser and start hacking.
Open project →
26
Security training for the apps you actually ship. Open your browser and start hacking.
TypeScript
#appsec#ctf#cybersecurity#nextjs#owasp-top10#security-training#supply-chain-security#typescript#vulnerable-web-app#xss
fix(cli): clone the release tag instead of main about 2 months ago
good first issue improvement
kOaDT/oss-oopssec-store kOaDT/oss-oopssec-store Security training for the apps you actually ship. Open your browser and start hacking.
Open project →
26
Security training for the apps you actually ship. Open your browser and start hacking.
TypeScript
#appsec#ctf#cybersecurity#nextjs#owasp-top10#security-training#supply-chain-security#typescript#vulnerable-web-app#xss
fix: capture stdout in create-oss-store runCommand about 2 months ago
bug good first issue
kOaDT/oss-oopssec-store kOaDT/oss-oopssec-store Security training for the apps you actually ship. Open your browser and start hacking.
Open project →
26
Security training for the apps you actually ship. Open your browser and start hacking.
TypeScript
#appsec#ctf#cybersecurity#nextjs#owasp-top10#security-training#supply-chain-security#typescript#vulnerable-web-app#xss
fix(cli): clean up the target directory when any post-clone step fails about 2 months ago
bug good first issue
kOaDT/oss-oopssec-store kOaDT/oss-oopssec-store Security training for the apps you actually ship. Open your browser and start hacking.
Open project →
26
Security training for the apps you actually ship. Open your browser and start hacking.
TypeScript
#appsec#ctf#cybersecurity#nextjs#owasp-top10#security-training#supply-chain-security#typescript#vulnerable-web-app#xss
feat(ctf): export the curriculum to CTFd / RootTheBox format about 2 months ago
help wanted ctf
kOaDT/oss-oopssec-store kOaDT/oss-oopssec-store Security training for the apps you actually ship. Open your browser and start hacking.
Open project →
26
Security training for the apps you actually ship. Open your browser and start hacking.
TypeScript
#appsec#ctf#cybersecurity#nextjs#owasp-top10#security-training#supply-chain-security#typescript#vulnerable-web-app#xss
feat(ctf): per-instance flags derived via HMAC(CTF_KEY, slug) about 2 months ago
help wanted ctf
kOaDT/oss-oopssec-store kOaDT/oss-oopssec-store Security training for the apps you actually ship. Open your browser and start hacking.
Open project →
26
Security training for the apps you actually ship. Open your browser and start hacking.
TypeScript
#appsec#ctf#cybersecurity#nextjs#owasp-top10#security-training#supply-chain-security#typescript#vulnerable-web-app#xss
refactor: extract isSQLInjectionAttempt into lib/ about 2 months ago
good first issue improvement
kOaDT/oss-oopssec-store kOaDT/oss-oopssec-store Security training for the apps you actually ship. Open your browser and start hacking.
Open project →
26
Security training for the apps you actually ship. Open your browser and start hacking.
TypeScript
#appsec#ctf#cybersecurity#nextjs#owasp-top10#security-training#supply-chain-security#typescript#vulnerable-web-app#xss
chore: remove the inert .degitignore about 2 months ago
good first issue
kOaDT/oss-oopssec-store kOaDT/oss-oopssec-store Security training for the apps you actually ship. Open your browser and start hacking.
Open project →
26
Security training for the apps you actually ship. Open your browser and start hacking.
TypeScript
#appsec#ctf#cybersecurity#nextjs#owasp-top10#security-training#supply-chain-security#typescript#vulnerable-web-app#xss
`formatDate` is duplicated in two admin clients about 2 months ago
good first issue improvement
kOaDT/oss-oopssec-store kOaDT/oss-oopssec-store Security training for the apps you actually ship. Open your browser and start hacking.
Open project →
26
Security training for the apps you actually ship. Open your browser and start hacking.
TypeScript
#appsec#ctf#cybersecurity#nextjs#owasp-top10#security-training#supply-chain-security#typescript#vulnerable-web-app#xss
SIEM login labels are not linked to their inputs about 2 months ago
good first issue improvement
kOaDT/oss-oopssec-store kOaDT/oss-oopssec-store Security training for the apps you actually ship. Open your browser and start hacking.
Open project →
26
Security training for the apps you actually ship. Open your browser and start hacking.
TypeScript
#appsec#ctf#cybersecurity#nextjs#owasp-top10#security-training#supply-chain-security#typescript#vulnerable-web-app#xss
`npm run lint` never fails on warnings about 2 months ago
good first issue improvement
kOaDT/oss-oopssec-store kOaDT/oss-oopssec-store Security training for the apps you actually ship. Open your browser and start hacking.
Open project →
26
Security training for the apps you actually ship. Open your browser and start hacking.
TypeScript
#appsec#ctf#cybersecurity#nextjs#owasp-top10#security-training#supply-chain-security#typescript#vulnerable-web-app#xss
Challenge count in the README hero is not covered by the parity suite about 2 months ago
good first issue improvement
kOaDT/oss-oopssec-store kOaDT/oss-oopssec-store Security training for the apps you actually ship. Open your browser and start hacking.
Open project →
26
Security training for the apps you actually ship. Open your browser and start hacking.
TypeScript
#appsec#ctf#cybersecurity#nextjs#owasp-top10#security-training#supply-chain-security#typescript#vulnerable-web-app#xss
Newsletter email input has no accessible name 2 months ago
good first issue improvement
kOaDT/oss-oopssec-store kOaDT/oss-oopssec-store Security training for the apps you actually ship. Open your browser and start hacking.
Open project →
26
Security training for the apps you actually ship. Open your browser and start hacking.
TypeScript
#appsec#ctf#cybersecurity#nextjs#owasp-top10#security-training#supply-chain-security#typescript#vulnerable-web-app#xss
Modal close buttons have no accessible name 2 months ago
good first issue improvement
kOaDT/oss-oopssec-store kOaDT/oss-oopssec-store Security training for the apps you actually ship. Open your browser and start hacking.
Open project →
26
Security training for the apps you actually ship. Open your browser and start hacking.
TypeScript
#appsec#ctf#cybersecurity#nextjs#owasp-top10#security-training#supply-chain-security#typescript#vulnerable-web-app#xss
`npm` renders as "Npm" in challenge titles 2 months ago
good first issue improvement
kOaDT/oss-oopssec-store kOaDT/oss-oopssec-store Security training for the apps you actually ship. Open your browser and start hacking.
Open project →
26
Security training for the apps you actually ship. Open your browser and start hacking.
TypeScript
#appsec#ctf#cybersecurity#nextjs#owasp-top10#security-training#supply-chain-security#typescript#vulnerable-web-app#xss
good first issue improvement
kOaDT/oss-oopssec-store kOaDT/oss-oopssec-store Security training for the apps you actually ship. Open your browser and start hacking.
Open project →
26
Security training for the apps you actually ship. Open your browser and start hacking.
TypeScript
#appsec#ctf#cybersecurity#nextjs#owasp-top10#security-training#supply-chain-security#typescript#vulnerable-web-app#xss
documentation good first issue
kOaDT/oss-oopssec-store kOaDT/oss-oopssec-store Security training for the apps you actually ship. Open your browser and start hacking.
Open project →
26
Security training for the apps you actually ship. Open your browser and start hacking.
TypeScript
#appsec#ctf#cybersecurity#nextjs#owasp-top10#security-training#supply-chain-security#typescript#vulnerable-web-app#xss
documentation good first issue
kOaDT/oss-oopssec-store kOaDT/oss-oopssec-store Security training for the apps you actually ship. Open your browser and start hacking.
Open project →
26
Security training for the apps you actually ship. Open your browser and start hacking.
TypeScript
#appsec#ctf#cybersecurity#nextjs#owasp-top10#security-training#supply-chain-security#typescript#vulnerable-web-app#xss
documentation good first issue
kOaDT/oss-oopssec-store kOaDT/oss-oopssec-store Security training for the apps you actually ship. Open your browser and start hacking.
Open project →
26
Security training for the apps you actually ship. Open your browser and start hacking.
TypeScript
#appsec#ctf#cybersecurity#nextjs#owasp-top10#security-training#supply-chain-security#typescript#vulnerable-web-app#xss
good first issue
kOaDT/oss-oopssec-store kOaDT/oss-oopssec-store Security training for the apps you actually ship. Open your browser and start hacking.
Open project →
26
Security training for the apps you actually ship. Open your browser and start hacking.
TypeScript
#appsec#ctf#cybersecurity#nextjs#owasp-top10#security-training#supply-chain-security#typescript#vulnerable-web-app#xss
docs: add Docker image link to the Resources section 4 months ago
documentation good first issue
kOaDT/oss-oopssec-store kOaDT/oss-oopssec-store Security training for the apps you actually ship. Open your browser and start hacking.
Open project →
26
Security training for the apps you actually ship. Open your browser and start hacking.
TypeScript
#appsec#ctf#cybersecurity#nextjs#owasp-top10#security-training#supply-chain-security#typescript#vulnerable-web-app#xss
documentation good first issue
kOaDT/oss-oopssec-store kOaDT/oss-oopssec-store Security training for the apps you actually ship. Open your browser and start hacking.
Open project →
26
Security training for the apps you actually ship. Open your browser and start hacking.
TypeScript
#appsec#ctf#cybersecurity#nextjs#owasp-top10#security-training#supply-chain-security#typescript#vulnerable-web-app#xss
documentation good first issue improvement
kOaDT/oss-oopssec-store kOaDT/oss-oopssec-store Security training for the apps you actually ship. Open your browser and start hacking.
Open project →
26
Security training for the apps you actually ship. Open your browser and start hacking.
TypeScript
#appsec#ctf#cybersecurity#nextjs#owasp-top10#security-training#supply-chain-security#typescript#vulnerable-web-app#xss
good first issue
kOaDT/oss-oopssec-store kOaDT/oss-oopssec-store Security training for the apps you actually ship. Open your browser and start hacking.
Open project →
26
Security training for the apps you actually ship. Open your browser and start hacking.
TypeScript
#appsec#ctf#cybersecurity#nextjs#owasp-top10#security-training#supply-chain-security#typescript#vulnerable-web-app#xss
documentation good first issue
kOaDT/oss-oopssec-store kOaDT/oss-oopssec-store Security training for the apps you actually ship. Open your browser and start hacking.
Open project →
26
Security training for the apps you actually ship. Open your browser and start hacking.
TypeScript
#appsec#ctf#cybersecurity#nextjs#owasp-top10#security-training#supply-chain-security#typescript#vulnerable-web-app#xss
Design: Create project logo, banners, and favicons 8 months ago
help wanted good first issue improvement
kOaDT/oss-oopssec-store kOaDT/oss-oopssec-store Security training for the apps you actually ship. Open your browser and start hacking.
Open project →
26
Security training for the apps you actually ship. Open your browser and start hacking.
TypeScript
#appsec#ctf#cybersecurity#nextjs#owasp-top10#security-training#supply-chain-security#typescript#vulnerable-web-app#xss
Reusable PageHero Component 8 months ago
good first issue improvement
kOaDT/oss-oopssec-store kOaDT/oss-oopssec-store Security training for the apps you actually ship. Open your browser and start hacking.
Open project →
26
Security training for the apps you actually ship. Open your browser and start hacking.
TypeScript
#appsec#ctf#cybersecurity#nextjs#owasp-top10#security-training#supply-chain-security#typescript#vulnerable-web-app#xss
ProductCard: Add / + Buttons Do Not Call Cart API 8 months ago
bug good first issue
kOaDT/oss-oopssec-store kOaDT/oss-oopssec-store Security training for the apps you actually ship. Open your browser and start hacking.
Open project →
26
Security training for the apps you actually ship. Open your browser and start hacking.
TypeScript
#appsec#ctf#cybersecurity#nextjs#owasp-top10#security-training#supply-chain-security#typescript#vulnerable-web-app#xss
documentation good first issue
kOaDT/oss-oopssec-store kOaDT/oss-oopssec-store Security training for the apps you actually ship. Open your browser and start hacking.
Open project →
26
Security training for the apps you actually ship. Open your browser and start hacking.
TypeScript
#appsec#ctf#cybersecurity#nextjs#owasp-top10#security-training#supply-chain-security#typescript#vulnerable-web-app#xss
documentation good first issue
kOaDT/oss-oopssec-store kOaDT/oss-oopssec-store Security training for the apps you actually ship. Open your browser and start hacking.
Open project →
26
Security training for the apps you actually ship. Open your browser and start hacking.
TypeScript
#appsec#ctf#cybersecurity#nextjs#owasp-top10#security-training#supply-chain-security#typescript#vulnerable-web-app#xss
Add Missing Walkthrough for path-traversal 8 months ago
documentation good first issue
kOaDT/oss-oopssec-store kOaDT/oss-oopssec-store Security training for the apps you actually ship. Open your browser and start hacking.
Open project →
26
Security training for the apps you actually ship. Open your browser and start hacking.
TypeScript
#appsec#ctf#cybersecurity#nextjs#owasp-top10#security-training#supply-chain-security#typescript#vulnerable-web-app#xss
Add Missing Walkthrough for public-env-variable flag 8 months ago
documentation good first issue
kOaDT/oss-oopssec-store kOaDT/oss-oopssec-store Security training for the apps you actually ship. Open your browser and start hacking.
Open project →
26
Security training for the apps you actually ship. Open your browser and start hacking.
TypeScript
#appsec#ctf#cybersecurity#nextjs#owasp-top10#security-training#supply-chain-security#typescript#vulnerable-web-app#xss
Newsletter Form: No Submit Behavior 8 months ago
good first issue improvement
kOaDT/oss-oopssec-store kOaDT/oss-oopssec-store Security training for the apps you actually ship. Open your browser and start hacking.
Open project →
26
Security training for the apps you actually ship. Open your browser and start hacking.
TypeScript
#appsec#ctf#cybersecurity#nextjs#owasp-top10#security-training#supply-chain-security#typescript#vulnerable-web-app#xss
Header: Inactive Mobile Menu 8 months ago
bug good first issue
kOaDT/oss-oopssec-store kOaDT/oss-oopssec-store Security training for the apps you actually ship. Open your browser and start hacking.
Open project →
26
Security training for the apps you actually ship. Open your browser and start hacking.
TypeScript
#appsec#ctf#cybersecurity#nextjs#owasp-top10#security-training#supply-chain-security#typescript#vulnerable-web-app#xss
good first issue improvement
kOaDT/oss-oopssec-store kOaDT/oss-oopssec-store Security training for the apps you actually ship. Open your browser and start hacking.
Open project →
26
Security training for the apps you actually ship. Open your browser and start hacking.
TypeScript
#appsec#ctf#cybersecurity#nextjs#owasp-top10#security-training#supply-chain-security#typescript#vulnerable-web-app#xss
good first issue improvement
kOaDT/oss-oopssec-store kOaDT/oss-oopssec-store Security training for the apps you actually ship. Open your browser and start hacking.
Open project →
26
Security training for the apps you actually ship. Open your browser and start hacking.
TypeScript
#appsec#ctf#cybersecurity#nextjs#owasp-top10#security-training#supply-chain-security#typescript#vulnerable-web-app#xss
Replace `alg: none` JWT with Weakly Signed JWT 9 months ago
good first issue improvement
kOaDT/oss-oopssec-store kOaDT/oss-oopssec-store Security training for the apps you actually ship. Open your browser and start hacking.
Open project →
26
Security training for the apps you actually ship. Open your browser and start hacking.
TypeScript
#appsec#ctf#cybersecurity#nextjs#owasp-top10#security-training#supply-chain-security#typescript#vulnerable-web-app#xss