Skip to content

Sync fork with WebGoat/WebGoat main - #44

Merged
fgibelin merged 6 commits into
mainfrom
fgibelin-sync-fork
Oct 12, 2026
Merged

Sync fork with WebGoat/WebGoat main#44
fgibelin merged 6 commits into
mainfrom
fgibelin-sync-fork

chore(release): prepare 2026.5

7e198f3
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / CodeQL failed Oct 12, 2026 in 3s

1 new alert including 1 critical severity security vulnerability

New alerts in code changed by this pull request

Security Alerts:

  • 1 critical

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 40 in src/main/java/org/owasp/webgoat/lessons/challenges/challenge2/ChainedXmlService.java

See this annotation in the file changed.

Code scanning / CodeQL

Resolving XML external entity in user-controlled data Critical

XML parsing depends on a
user-provided value
Loading
without guarding against external entity expansion.