cerberauth / api-vulns-challenges

Provide a collection of deliberately vulnerable APIs along with corresponding challenges to help enhancing their skills in identifying, exploiting, and securing API vulnerabilities.
https://vulnapi.cerberauth.com
GNU General Public License v3.0
2 stars 0 forks source link

Dependency Dashboard #12

Open renovate[bot] opened 1 year ago

renovate[bot] commented 1 year ago

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

[!WARNING] These dependencies are deprecated:

Datasource Name Replacement PR?
npm @types/helmet Unavailable

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

Detected dependencies

dockerfile
challenges/apollo/Dockerfile - `node 22` - `node 22-slim`
challenges/auth-not-verified/Dockerfile - `golang 1.23`
challenges/http-misconfigurations/Dockerfile - `golang 1.23`
challenges/jwt-alg-none-bypass/Dockerfile - `golang 1.23`
challenges/jwt-blank-secret/Dockerfile - `golang 1.23`
challenges/jwt-not-verified/Dockerfile - `golang 1.23`
challenges/jwt-null-signature/Dockerfile - `golang 1.23`
challenges/jwt-strong-eddsa-key/Dockerfile - `golang 1.23`
challenges/jwt-weak-hmac-secret/Dockerfile - `golang 1.23`
challenges/jwt-weak-rsa-key/Dockerfile - `golang 1.23`
github-actions
.github/workflows/ci.yml - `actions/checkout v4` - `actions/checkout v4` - `docker/setup-buildx-action v3` - `docker/login-action v3` - `docker/build-push-action v6`
.github/workflows/stale.yml - `actions/stale v9`
gomod
challenges/auth-not-verified/go.mod - `go 1.20` - `github.com/spf13/cobra v1.8.1`
challenges/http-misconfigurations/go.mod - `go 1.20` - `github.com/spf13/cobra v1.8.1`
challenges/jwt-alg-none-bypass/go.mod - `go 1.20` - `github.com/golang-jwt/jwt/v5 v5.2.1` - `github.com/spf13/cobra v1.8.1`
challenges/jwt-blank-secret/go.mod - `go 1.20` - `github.com/golang-jwt/jwt/v5 v5.2.1` - `github.com/spf13/cobra v1.8.1`
challenges/jwt-not-verified/go.mod - `go 1.20` - `github.com/golang-jwt/jwt/v5 v5.2.1` - `github.com/spf13/cobra v1.8.1`
challenges/jwt-null-signature/go.mod - `go 1.20` - `github.com/golang-jwt/jwt/v5 v5.2.1` - `github.com/spf13/cobra v1.8.1`
challenges/jwt-strong-eddsa-key/go.mod - `go 1.20` - `github.com/golang-jwt/jwt/v5 v5.2.1` - `github.com/spf13/cobra v1.8.1`
challenges/jwt-weak-hmac-secret/go.mod - `go 1.20` - `github.com/golang-jwt/jwt/v5 v5.2.1` - `github.com/spf13/cobra v1.8.1`
challenges/jwt-weak-rsa-key/go.mod - `go 1.20` - `github.com/golang-jwt/jwt/v5 v5.2.1` - `github.com/spf13/cobra v1.8.1`
npm
challenges/apollo/package.json - `@apollo/server ^4.11.0` - `cors ^2.8.5` - `express ^4.21.1` - `graphql ^16.9.0` - `helmet ^8.0.0` - `morgan ^1.10.0` - `@types/cors ^2.8.17` - `@types/express ^5.0.0` - `@types/helmet ^4.0.0` - `@types/morgan ^1.9.9` - `@types/node ^22.8.1` - `typescript ^5.6.3`
nvm
challenges/apollo/.nvmrc - `node 22`