Issues

• JWT levels share one cookie name and overwrite each other's token

  enhancementgood first issue
  SasanLabs/VulnerableApp#879 · Filter by author vianbas opened on Oct 30, 2026
  1

• Add a SECURITY.md security policy

  SasanLabs/VulnerableApp#870 · Filter by author palSayan1000 opened on Oct 26, 2026

• [Benchmark] Integrate SonarQube Community Build for Free Java/PHP Security-Rule Benchmarking

  enhancementIntegration
  SasanLabs/VulnerableApp#866 · Filter by author preetkaran20 opened on Oct 26, 2026

• [Benchmark] Integrate Nikto for Web-Server Configuration Benchmarking Feasibility Assessment

  AnalysisenhancementIntegration
  SasanLabs/VulnerableApp#864 · Filter by author preetkaran20 opened on Oct 26, 2026

• [Benchmark] Integrate SSRFmap for Request-Driven SSRF Benchmarking Feasibility Assessment

  AnalysisenhancementIntegration
  SasanLabs/VulnerableApp#863 · Filter by author preetkaran20 opened on Oct 26, 2026

• [Benchmark] Integrate Commix for OS Command Injection Detection Benchmarking

  enhancementgood first issueIntegration
  SasanLabs/VulnerableApp#862 · Filter by author preetkaran20 opened on Oct 26, 2026

• [Benchmark] Integrate Dalfox for XSS Detection Benchmarking

  enhancementgood first issueIntegration
  SasanLabs/VulnerableApp#861 · Filter by author preetkaran20 opened on Oct 26, 2026

• [Benchmark] Integrate sqlmap for SQL Injection Detection Benchmarking

  enhancementgood first issueIntegration
  SasanLabs/VulnerableApp#860 · Filter by author preetkaran20 opened on Oct 26, 2026

• [VulnerableApp-facade] Preserve CWE and WASC IDs When Aggregating DAST Ground Truth

  enhancement
  SasanLabs/VulnerableApp#857 · Filter by author preetkaran20 opened on Oct 26, 2026

• [VulnerableApp-PHP] Align the DAST Ground-Truth Response With the CWE/WASC Schema

  enhancement
  SasanLabs/VulnerableApp#856 · Filter by author preetkaran20 opened on Oct 26, 2026

• [VulnerableApp] Expose CWE and WASC IDs in the DAST Ground-Truth Endpoint

  enhancementgood first issue
  SasanLabs/VulnerableApp#855 · Filter by author preetkaran20 opened on Oct 26, 2026

• [VulnerableApp] Define the Canonical DAST Ground-Truth Schema for CWE and WASC IDs

  enhancementgood first issue
  SasanLabs/VulnerableApp#854 · Filter by author preetkaran20 opened on Oct 26, 2026

• [VulnerableApp] Expose CWE and WASC IDs Directly in the DAST Ground-Truth Endpoint

  enhancementgood first issue
  SasanLabs/VulnerableApp#853 · Filter by author preetkaran20 opened on Oct 26, 2026

• [VulnerableApp] Define How SAST Findings Should Be Scored When Line Numbers Differ

  enhancementgood first issueMajor Requirement
  SasanLabs/VulnerableApp#852 · Filter by author preetkaran20 opened on Oct 26, 2026
  3

• waf github action failing

  Need-To-Look
  SasanLabs/VulnerableApp#850 · Filter by author preetkaran20 opened on Oct 25, 2026
  1

• feat: add HTML-based sitemap to support web crawlers without XML parsing

  enhancementgood first issue
  SasanLabs/VulnerableApp#840 · Filter by author souravC01 opened on Oct 23, 2026
  1

• UrlParamBasedRFI: the local-file-injection payload always crashes, and error handling doesn't match what RestTemplate throws

  bugenhancementgood first issue
  SasanLabs/VulnerableApp#838 · Filter by author pereiravp opened on Oct 17, 2026
  5

• Add Build script for Python related code changes which runs with PR

  enhancementgood first issue
  SasanLabs/VulnerableApp#836 · Filter by author preetkaran20 opened on Oct 17, 2026
  5

  

• Create Dashboard for DAST and SAST Scanner Benchmark

  enhancementIntegrationMajor Requirement
  SasanLabs/VulnerableApp#813 · Filter by author preetkaran20 opened on Sep 24, 2026
  6

  

• Add Nuclei DAST Scanner Integration to VulnerableApp Benchmark

  enhancementgood first issueIntegrationMajor Requirement
  SasanLabs/VulnerableApp#811 · Filter by author preetkaran20 opened on Sep 24, 2026

• Add SpotBugs and FindSecBugs SAST Scanner Integration to VulnerableApp Benchmark

  enhancementgood first issueIntegrationMajor Requirement
  SasanLabs/VulnerableApp#810 · Filter by author preetkaran20 opened on Sep 24, 2026
  2

  

• Add PMD SAST Scanner Integration to VulnerableApp Benchmark

  enhancementgood first issueIntegrationMajor Requirement
  SasanLabs/VulnerableApp#809 · Filter by author preetkaran20 opened on Sep 24, 2026
  2

  

• [Community Testing] Documentation, Setup, and Usage Gaps

  documentationgood first issuehelp wanted
  SasanLabs/VulnerableApp#757 · Filter by author preetkaran20 opened on Aug 15, 2026
  1

  

• [Community Testing] Clickjacking

  good first issuehelp wanted
  SasanLabs/VulnerableApp#755 · Filter by author preetkaran20 opened on Aug 15, 2026
  3

  

• [Community Testing] LDAP Injection

  good first issuehelp wanted
  SasanLabs/VulnerableApp#756 · Filter by author preetkaran20 opened on Aug 15, 2026
  1