We've been working on an example vulnerable app to showcase vulnerable dependencies in web apps. (Think a CVE in an NPM package.)<p>I've been wanting that so that I can test out different security scanning and patching tools, but also actually build a test playground to exploit vulnerable dependencies. (I want to accelerate exploit development for CVEs by making it more standardized.)<p>If you have a CVE that you'd like to write a POC exploit scenario for, you can add it to this project quickly and easily with pre-built templates[1]! (Wasp[2] is an awesome project that simplifies web dev tooling complexity.)<p>Are there any other projects with similar goals that anybody is aware of? Asking because I couldn't find any, but I'd love to merge efforts if somebody is already doing this!<p>0: <a href="https://github.com/lunasec-io/damn-vulnerable-js-sca">https://github.com/lunasec-io/damn-vulnerable-js-sca</a><p>1: <a href="https://github.com/lunasec-io/damn-vulnerable-js-sca/tree/master/wasp/template">https://github.com/lunasec-io/damn-vulnerable-js-sca/tree/ma...</a><p>2: <a href="https://wasp-lang.dev/">https://wasp-lang.dev/</a>