https://cybertoolchain.io/tools/juice-shop New releases and features in juice-shop, tracked by The Cyber Toolchain. en Sun, 11 Oct 2026 22:48:38 GMT https://github.com/juice-shop/juice-shop/releases/tag/v20.3.0 https://github.com/juice-shop/juice-shop/releases/tag/v20.3.0 Sun, 11 Oct 2026 22:48:38 GMT juice-shop v20.3.0 adds `alternateImages` config, AVIF product images, and Farsi and Tamil language support.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds optional `alternateImages` configuration property to define alternative product image formats and densities.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds responsive AVIF product images across 1x, 2x, and 3x display densities. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/juice-shop https://github.com/juice-shop/juice-shop/blob/master/swagger.yml https://github.com/juice-shop/juice-shop/blob/master/swagger.yml Sun, 11 Oct 2026 10:07:57 GMT Adds NextGen B2B API v2.0.0 at `/b2b/v2` with a JSON-based `POST /orders` endpoint replacing legacy XML endpoints.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `POST /b2b/v2/orders` endpoint (`createCustomerOrder`) accepting a JSON `Order` body (requiring `cid`, optional `orderLines` / `orderLinesData`) and returning an `OrderConfirmation` with `cid`, `orderNo`, and `paymentDue` (date, 14-day terms); secured with JWT Bearer auth.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Introduces the NextGen B2B API v2.0.0 at base path `/b2b/v2`, a JSON-based enterprise ordering API that deprecates the previously offered XML-based endpoints. Breaking changes: • Deprecation notice: description: 'New & secure JSON-based API for our enterprise customers. (Deprecates previously offered XML-based endpoints)' Full history on Cyber Toolchain: https://cybertoolchain.io/tools/juice-shop https://github.com/juice-shop/juice-shop/blob/master/swagger.yml https://github.com/juice-shop/juice-shop/blob/master/swagger.yml Thu, 08 Oct 2026 00:45:26 GMT Juice Shop adds a NextGen B2B REST API at `/b2b/v2` with JWT bearer auth, replacing XML-based order endpoints.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `POST /b2b/v2/orders` endpoint (`createCustomerOrder`) for placing customer orders in JSON format, returning an `OrderConfirmation` with `cid`, `orderNo`, and `paymentDue` fields.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Introduces JWT bearer auth (`bearerAuth`, `bearerFormat: JWT`) as the security scheme for all B2B v2 endpoints. • Supports `OrderLinesData` schema for submitting order lines in customer-specific JSON string format, alongside the structured `OrderLines` array. • Launches the NextGen B2B API (`/b2b/v2`) as a JSON-based replacement for the previously offered XML-based B2B endpoints. Breaking changes: • The previously offered XML-based B2B endpoints are deprecated in favour of the new JSON-based `/b2b/v2` API; integrations relying on the XML endpoints should migrate. • Deprecation notice: New & secure JSON-based API for our enterprise customers. (Deprecates previously offered XML-based endpoints) Full history on Cyber Toolchain: https://cybertoolchain.io/tools/juice-shop https://github.com/juice-shop/juice-shop/blob/master/swagger.yml https://github.com/juice-shop/juice-shop/blob/master/swagger.yml Mon, 14 Sep 2026 14:43:43 GMT Breaking changes: • Deprecation notice: description: 'New & secure JSON-based API for our enterprise customers. (Deprecates previously offered XML-based endpoints)' Full history on Cyber Toolchain: https://cybertoolchain.io/tools/juice-shop https://github.com/juice-shop/juice-shop/blob/master/swagger.yml https://github.com/juice-shop/juice-shop/blob/master/swagger.yml Sun, 13 Sep 2026 14:52:32 GMT juice-shop adds a NextGen B2B REST API at `/b2b/v2` replacing XML-based endpoints, with JWT bearer auth and JSON order management.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `POST /b2b/v2/orders` endpoint (`operationId: createCustomerOrder`) to create customer orders, accepting an `Order` body with `cid`, `orderLines`, and `orderLinesData` fields and returning an `OrderConfirmation` with `orderNo` and `paymentDue`.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds JWT bearer authentication (`bearerAuth`, scheme: bearer, format: JWT) as the security scheme for all `/b2b/v2` endpoints. • Introduces the NextGen B2B JSON API (`/b2b/v2`, version 2.0.0), replacing the previously offered XML-based B2B endpoints. • Supports `orderLinesData` as a free-form JSON string field on orders, enabling customer-specific order line formats including `couponCode` alongside standard `productId`, `quantity`, and `customerReference`. Breaking changes: • Deprecation notice: description: 'New & secure JSON-based API for our enterprise customers. (Deprecates previously offered XML-based endpoints)' Full history on Cyber Toolchain: https://cybertoolchain.io/tools/juice-shop https://github.com/juice-shop/juice-shop/blob/master/swagger.yml https://github.com/juice-shop/juice-shop/blob/master/swagger.yml Sat, 12 Sep 2026 13:33:17 GMT juice-shop adds a NextGen B2B JSON API at /b2b/v2 with a POST /orders endpoint secured by JWT bearer auth.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Introduces the `OrderLinesData` schema for passing order lines in customer-specific JSON format as a raw string, enabling flexible enterprise order integrations alongside the structured `OrderLines` array format. Breaking changes: • Deprecation notice: description: 'New & secure JSON-based API for our enterprise customers. (Deprecates previously offered XML-based endpoints)' Full history on Cyber Toolchain: https://cybertoolchain.io/tools/juice-shop https://github.com/juice-shop/juice-shop/blob/master/swagger.yml https://github.com/juice-shop/juice-shop/blob/master/swagger.yml Fri, 11 Sep 2026 14:51:09 GMT juice-shop: Adds JWT bearer authentication (`bearerAuth`, scheme: bearer, format: JWT) as the security scheme for all `/b2b/v2` endpoints. • Supports an `orderLinesData` field on `Order` for customer-specific free-form JSON order lines, alongside the structured `orderLines` array (each line requiring `productId` and `quantity`, with optional `customerReference`). Breaking changes: • Deprecation notice: description: 'New & secure JSON-based API for our enterprise customers. (Deprecates previously offered XML-based endpoints)' Full history on Cyber Toolchain: https://cybertoolchain.io/tools/juice-shop https://github.com/juice-shop/juice-shop/blob/master/swagger.yml https://github.com/juice-shop/juice-shop/blob/master/swagger.yml Thu, 10 Sep 2026 14:51:26 GMT juice-shop adds a JSON-based NextGen B2B API at /b2b/v2 with JWT bearer auth and a POST /orders endpoint for enterprise order management.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `POST /b2b/v2/orders` endpoint (`createCustomerOrder`) that accepts a JSON request body containing `cid`, `orderLines`, and `orderLinesData` fields and returns an `OrderConfirmation` with `orderNo` and `paymentDue`.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Secures the new B2B API with HTTP Bearer authentication using JWT (`bearerAuth` security scheme), required on all `/b2b/v2` routes. • Introduces the `OrderLinesData` schema allowing order lines to be submitted in a customer-specific JSON string format, supporting fields such as `couponCode` and multi-value `customerReference` arrays alongside standard `productId` and `quantity`. • Launches the NextGen B2B API (`/b2b/v2`, version 2.0.0) as a JSON-based replacement for the previously offered XML-based enterprise endpoints. Breaking changes: • Deprecation notice: description: 'New & secure JSON-based API for our enterprise customers. (Deprecates previously offered XML-based endpoints)' Full history on Cyber Toolchain: https://cybertoolchain.io/tools/juice-shop https://github.com/juice-shop/juice-shop/releases/tag/v20.2.0 https://github.com/juice-shop/juice-shop/releases/tag/v20.2.0 Mon, 10 Aug 2026 21:58:43 GMT Juice Shop v20.2.0 adds three new challenges, Dice Coefficient cheat detection, and a user profile role field. • Adds `allowScripts` configuration key to `package.json` and `frontend/package.json`. • Adds new -challenge 'Misplaced IaC Files' to the challenge set. • Adds new -challenge 'Login Cloud Admin' (including coding challenge) to the challenge set. • Adds new -challenge 'Vulnerable Infrastructure' (including coding challenge) to the challenge set. • Adds cheat detection for source file overlap in challenge submissions using Dice Coefficient similarity scoring. • Adds role field and deluxe membership link to the user profile page. • Upgrades frontend to Angular 22.x and Angular Material 22.x. • Replaces Grunt with a custom packaging script (`scripts/package.mjs`) for the build process. • Disables the dangerous 'Deprecated Interface' challenge on Docker/Heroku by default. • Supports n-gram similarity checks for the 'System Prompt Extraction' challenge. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/juice-shop https://github.com/juice-shop/juice-shop/releases/tag/v20.1.0 https://github.com/juice-shop/juice-shop/releases/tag/v20.1.0 Tue, 23 Jun 2026 17:13:42 GMT Juice Shop v20.1.0 adds a prompt-injection challenge, Node.js 26 support, and a new CSRF config option. • New 'System Prompt Extraction' challenge: prompt injection attack against the chatbot. • Adds a 'Fix It' coding phase for the NFT Takeover challenge. • Supports Node.js 26.x as a runtime. • Replaces native `libxmljs2` with WASM-based `libxml2-wasm`, eliminating the native build dependency. • Adds `overwriteUrlForCsrfChallenge` configuration option to customize the attack origin for the CSRF challenge. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/juice-shop https://github.com/juice-shop/juice-shop/releases/tag/v20.1.0 https://github.com/juice-shop/juice-shop/releases/tag/v20.1.0 Tue, 23 Jun 2026 17:13:42 GMT juice-shop v20.1.0 adds Node.js 26 support, a new prompt-injection challenge, and a CSRF origin config option. • Supports Node.js 26.x runtime. • Switches from native `libxmljs2` to WASM-based `libxml2-wasm`, eliminating native build dependencies. • New three-star challenge: _System Prompt Extraction_ — a prompt injection attack against the chatbot. • Adds a 'Fix It' remediation phase for the _NFT Takeover_ coding challenge. • New `overwriteUrlForCsrfChallenge` configuration option to customize the attack origin used in the CSRF challenge. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/juice-shop https://github.com/juice-shop/juice-shop/releases/tag/v20.0.0 https://github.com/juice-shop/juice-shop/releases/tag/v20.0.0 Tue, 12 May 2026 21:21:01 GMT Juice Shop v20 adds AI/LLM injection challenges, guest basket support, new themes, Prometheus LLM metrics, and a ~30% faster startup. • Adds three new AI/LLM challenges — 'Chatbot Prompt Injection' (), 'Greedy Chatbot Manipulation' (), and 'AI Debugging' () — requiring a configured LLM/AI endpoint. • Adds Prometheus metrics to track LLM token usage and tool calls (requires LLM endpoint support). • New guest basket support lets anonymous users add items and merge their basket on login. • Introduces two new UI themes: `neon-fire` (now the default for CTF configuration) and `lime-green`. • Redesigned Coding Challenge view as a standalone page with improved flow and modern code highlighters. • Changed product overview to a compact grid layout; applies enhanced grid view and blur effect to the photo wall as well. • Optimized startup time by ~30% via lazy-loading and batched startup database inserts. • Adds strict enum validation for configuration options including `codingChallengesEnabled`, `hintPlaybackSpeed`, and `showCountryDetailsInNotifications`. • Cheat detection now treats direct access to tracking pixels as guaranteed cheating, and loosely coupled challenges no longer trigger cheat scoring based on timing. • Docker container image reduced to its smallest size since Juice Shop v8. Breaking changes: • Node.js 20.x is no longer supported; upgrade to a newer supported Node.js version before upgrading. • The NLP-based chatbot and its challenges 'Bully Chatbot' and 'Kill Chatbot' have been removed, breaking CTF setups or solution guides that rely on them. • Challenges 'Mint the Honeypot' and 'Wallet Depletion' now require an `ALCHEMY_API_KEY` environment variable to function. • The `Internet Traffic` challenge tag has been renamed to `External Dependency`, which may break customization files or CTF setups referencing the old tag name. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/juice-shop https://github.com/juice-shop/juice-shop/releases/tag/v19.2.0 https://github.com/juice-shop/juice-shop/releases/tag/v19.2.0 Sat, 07 Mar 2026 10:16:27 GMT Juice Shop v19.2.0 adds a new Password Hash Leak challenge, coding challenge expansions, and CTF system-wide notification support. • Adds new two-star _Password Hash Leak_ challenge for practicing credential exposure scenarios. • Adds coding challenges for the _Wallet Depletion_ and _Mint the Honeypot_ challenges. • Supports displaying CTF system-wide notifications from MultiJuicer and other CTF systems via a configurable endpoint. • Payloads in challenge descriptions on the Score Board can now be copied to clipboard by clicking on them. • Language dropdown now includes backend strings in its translation gauge and percentage. • Adds _Jump to related coding challenge_ button to challenge-solved notifications. • Coding challenge flow now auto-scrolls to the _Fix It_ tab when _Find It_ has already been solved. • Updated SBOM generation to CycloneDX 1.6 format; only JSON SBOMs are now generated (no XML). • Official Docker image now uses Node.js 24.x base images. Breaking changes: • The `challenges.showFeedbackButtons` option has been removed from all configuration files — any customization referencing this key will break on upgrade. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/juice-shop https://github.com/juice-shop/juice-shop/releases/tag/v19.1.0 https://github.com/juice-shop/juice-shop/releases/tag/v19.1.0 Sun, 16 Nov 2025 13:50:56 GMT juice-shop v19.1.0 adds a new Observability Failures challenge category covering logging and monitoring gaps. • New 'Observability Failures' challenge category groups four logging- and monitoring-related challenges for targeted practice. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/juice-shop https://github.com/juice-shop/juice-shop/releases/tag/v19.0.0 https://github.com/juice-shop/juice-shop/releases/tag/v19.0.0 Thu, 04 Sep 2025 05:50:12 GMT Juice Shop v19 adds Node.js 24 support, Angular 20 upgrade, and a new multi-hint system on the Score Board. • Adds support for Node.js 24.x runtime. • Updates frontend to Angular 20.x and Angular Material 20.x. • New Score Board feature: gradually unlockable hints per challenge, revealed progressively as players need help. • Adds backend and challenge solution webhook support for multiple text hints per challenge. Breaking changes: • The `hint` and `hintUrl` fields are removed from `challenges.yml` definition and the corresponding entity model — any customization files or integrations that reference these fields must be updated. • Significant changes to existing challenges may break canned CTF setups and solution guides made for previous versions of OWASP Juice Shop. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/juice-shop https://github.com/juice-shop/juice-shop/releases/tag/v18.0.0 https://github.com/juice-shop/juice-shop/releases/tag/v18.0.0 Tue, 17 Jun 2025 05:08:00 GMT Juice Shop v18 adds a new Leaked API Key challenge, a DEF CON 33 theme, and a metrics user-agent config option. • Adds new five-star _Leaked API Key_ challenge for advanced CTF/training scenarios. • Adds full-conversion DEF CON 33 theme activatable via `NODE_ENV=defcon33 npm start`. • Adds `metricsIgnoredUserAgents` config option to control which monitoring agents count toward challenge tracking. • Adds `ftp/package-lock.json` to make Vulnerable Components category challenges more accessible. • Switches XML parser from `libxmljs` to `libxmljs2`, supporting up to at least Node.js 24. • Official Docker image now uses Node.js 22.x base images. Breaking changes: • Node.js 18.x is no longer supported; packaged distributions for 18.x are no longer provided — upgrade to Node.js 20.x or 22.x before upgrading Juice Shop. • The _Cross-Site Imaging_ challenge now uses https://cataas.com/ instead of http://placecats.com/, which will break existing CTF solution guides and canned setups that reference the old service. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/juice-shop https://github.com/juice-shop/juice-shop/releases/tag/v17.3.0 https://github.com/juice-shop/juice-shop/releases/tag/v17.3.0 Tue, 22 Apr 2025 22:13:33 GMT Juice Shop v17.3.0 adds a searchable language selector and upgrades to Angular 19 and Debian 12. • Adds search functionality to the language selection dropdown for faster language discovery. • Upgrades frontend to Angular 19.x and Angular Material 19.x. • Updates Docker base image from Debian 11 to Debian 12. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/juice-shop https://github.com/juice-shop/juice-shop/releases/tag/v17.2.0 https://github.com/juice-shop/juice-shop/releases/tag/v17.2.0 Fri, 14 Mar 2025 21:04:32 GMT Juice Shop v17.2.0 adds a new 5-star Memory Bomb challenge, Angular 17 frontend, and BlueSky/Mastodon social config support. • Adds new _Memory Bomb_ challenge for advanced CTF and training scenarios. • Upgrades frontend to Angular 17.x and Angular Material 17.x. • Adds `blueSkyUrl` and `mastodonUrl` fields to the `social` section of the configuration. • Adds BlueSky and Mastodon profile links to the About Us screen. Breaking changes: • The _Cross-Site Imaging_ challenge now uses http://placecats.com instead of http://placekitten.com — canned CTF setups or solution guides relying on the old endpoint will break. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/juice-shop https://github.com/juice-shop/juice-shop/releases/tag/v17.1.0 https://github.com/juice-shop/juice-shop/releases/tag/v17.1.0 Mon, 05 Aug 2024 15:07:20 GMT juice-shop v17.1.0 adds Node.js 22 support and guided tutorials for Admin Section and Reflected XSS challenges. • Adds support for Node.js 22.x runtime. • New guided tutorial script for the 'Admin Section' () challenge. • New guided tutorial script for the 'Reflected XSS' () challenge. • Improved DevTools-open detection in the hacking instructor tutorial helper. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/juice-shop https://github.com/juice-shop/juice-shop/releases/tag/v17.0.0 https://github.com/juice-shop/juice-shop/releases/tag/v17.0.0 Fri, 24 May 2024 21:08:54 GMT Adds the new Security Advisory challenge, reduces Docker image size, and cleans up legacy UI/config. • Adds #2198: `Security Advisory`-challenge • Significantly reduce Docker image size by omitting unneeded dependencies • Adjusts image URLs in `7ms` theme and extends with photo wall entries and new products Breaking changes: • Removed legacy Score Board and all related settings and services • Removed re-routing of legacy `challenge=<name>` parameter • Removed `scoreBoard` subsection from backup format • Installation from source code on Node.js >20 currently requires C++ binaries to be built during installation Full history on Cyber Toolchain: https://cybertoolchain.io/tools/juice-shop https://github.com/juice-shop/juice-shop/releases/tag/v16.0.0 https://github.com/juice-shop/juice-shop/releases/tag/v16.0.0 Tue, 19 Dec 2023 15:35:41 GMT Juice Shop v16.0.0 adds Node.js 21 support, median cheat scoring, and legacy UI layout options. • `Inverted banners` and option to switch layouts allows setting the legacy Score Board as default Breaking changes: • Removed support for Node.js 16.x and packaged distributions for this version Full history on Cyber Toolchain: https://cybertoolchain.io/tools/juice-shop https://github.com/juice-shop/juice-shop/releases/tag/v15.3.0 https://github.com/juice-shop/juice-shop/releases/tag/v15.3.0 Fri, 03 Nov 2023 20:11:03 GMT Adds optional `scoreBoard.scoreBoardVersion` config key for local backup and new startup validation checks • Added optional `scoreBoard.scoreBoardVersion` property to persist/restore `score-board-version` from browser local storage. • Added warning-only startup check for domains being reachable from the server, e.g. `https://www.alchemy.com/`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/juice-shop https://github.com/juice-shop/juice-shop/releases/tag/v15.2.0 https://github.com/juice-shop/juice-shop/releases/tag/v15.2.0 Fri, 22 Sep 2023 16:37:04 GMT v15.2.0 adds 'Internet Traffic' challenge tag, coding challenges for Web3 Sandbox, and Score Board tooltips. • Adds `Internet Traffic` tag to mark challenges requiring external server calls • Shows tag descriptions as tooltips on the Score Board Full history on Cyber Toolchain: https://cybertoolchain.io/tools/juice-shop https://github.com/juice-shop/juice-shop/releases/tag/v15.1.0 https://github.com/juice-shop/juice-shop/releases/tag/v15.1.0 Fri, 08 Sep 2023 13:03:29 GMT juice-shop v15.1.0 adds Web3 challenge suite, redesigned Score Board, and CycloneDX SBOMs • `https://sepolia.infura.io` is now required for Web3 challenges to access deployed smart contracts • Adds a fully re-designed `Score Board` UI with toggle between old and new versions • New Web3 challenge suite: "Web3 Sandbox", "NFT Takeover", "Mint the Honey Pot", and "Wallet Depletion" • Adds OWASP CycloneDX SBOMs for both backend and frontend components Breaking changes: • The application server now requires outbound Internet access to `https://sepolia.infura.io`; blocking this URL will break Web3 challenges. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/juice-shop https://github.com/juice-shop/juice-shop/releases/tag/v15.0.0 https://github.com/juice-shop/juice-shop/releases/tag/v15.0.0 Fri, 19 May 2023 23:00:51 GMT v15.0.0 adds 'Empty User Registration' challenge and Node.js 20.x support • Added support for Node.js 20.x runtime • Removed support for Node.js 14.x, 19.x, and inofficial Node.js 15.x • Added 'Empty User Registration' challenge under the _Improper Input Validation_ category Breaking changes: • Node.js 14.x and 19.x are no longer supported and packaged distributions for these versions are removed. • Inofficial Node.js 15.x support is removed. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/juice-shop https://github.com/juice-shop/juice-shop/releases/tag/v14.5.1 https://github.com/juice-shop/juice-shop/releases/tag/v14.5.1 Tue, 14 Feb 2023 14:08:37 GMT Adds Irish language support and extends Swiss German translations to Juice Shop. • Added (Irish) language support • Extended (Swiss German) translation coverage Full history on Cyber Toolchain: https://cybertoolchain.io/tools/juice-shop https://github.com/juice-shop/juice-shop/releases/tag/v14.5.0 https://github.com/juice-shop/juice-shop/releases/tag/v14.5.0 Tue, 07 Feb 2023 15:08:44 GMT v14.5.0 adds a 'Weak Password' coding challenge; drops 32-bit ARM Docker support • Adds `#1913` Weak Password coding challenge to the Coding Challenges module • Removes dedicated 32-bit ARM Docker image due to Node.js 14.x EOL and compatibility issues Breaking changes: • The dedicated Docker image for 32bit ARM processors is removed; users must migrate to a supported architecture or Node.js version. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/juice-shop https://github.com/juice-shop/juice-shop/releases/tag/v14.4.0 https://github.com/juice-shop/juice-shop/releases/tag/v14.4.0 Wed, 04 Jan 2023 05:43:07 GMT Adds `application.social.nftUrl` config key for customizable NFT URL and upgrades to Angular 15. • Adds `application.social.nftUrl` configuration property to define the NFT URL used by the frontend (default: `https://opensea.io/collection/juice-shop`). • Continues codes for local backup now retrieve the fallback value from a cookie instead of only server-side storage. • Migrated the frontend application to Angular 15. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/juice-shop https://github.com/juice-shop/juice-shop/releases/tag/v14.3.0 https://github.com/juice-shop/juice-shop/releases/tag/v14.3.0 Sat, 24 Sep 2022 13:49:03 GMT Adds 'Mass Dispel' challenge for bulk notification dismissal training • Added _Mass Dispel_ challenge to teach closing multiple challenge notifications in one go Full history on Cyber Toolchain: https://cybertoolchain.io/tools/juice-shop https://github.com/juice-shop/juice-shop/releases/tag/v14.1.0 https://github.com/juice-shop/juice-shop/releases/tag/v14.1.0 Sun, 03 Jul 2022 20:56:12 GMT Adds `hiring` field to security.txt and X-Recruiting header via new application.securityTxt.hiring config key • Adds `application.securityTxt.hiring` configuration property to control the `hiring` field in `security.txt` and the `X-Recruiting` HTTP header Full history on Cyber Toolchain: https://cybertoolchain.io/tools/juice-shop https://github.com/juice-shop/juice-shop/releases/tag/v14.0.0 https://github.com/juice-shop/juice-shop/releases/tag/v14.0.0 Sat, 07 May 2022 15:50:38 GMT Adds configurable tutorial hint playback speed via hackingInstructor.hintPlaybackSpeed; drops Node.js 12/17 support. • Adds `hackingInstructor.hintPlaybackSpeed` config option (values: `faster`, `slower`, `fast`, `slow`, or `normal`) to adjust tutorial hint playback speed by ±50% or ±25% respectively. • Splits the CI/CD `test` job into three separate jobs: `test` (unit tests), `api-test` (Frisby.js API tests), and `coverage-report` (Codeclimate merge/upload). Breaking changes: • Removed support for Node.js 12.x and 17.x, requiring migration to a newer Node.js version. • Vagrant box now exposes the application at `http://192.168.56.110` instead of previous IP ranges. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/juice-shop https://github.com/juice-shop/juice-shop/releases/tag/v13.2.0 https://github.com/juice-shop/juice-shop/releases/tag/v13.2.0 Fri, 21 Jan 2022 21:08:38 GMT Adds ARM Docker image tags and a Refactoring Safety Net command for coding challenges • Adds `latest-arm`, `snapshot-arm` and `vX.Y.Z-arm` Docker image tags built for `linux/arm64` and `linux/arm/v7` architectures. • Adds `npm run rsn` command to check for accidental differences in coding challenge code-fix files via the new `coding-challenge-rsn` CI/CD job. Breaking changes: • `latest`, `snapshot` and `vX.Y.Z` Docker image tags are now only built for `linux/amd64` and no longer include ARM support. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/juice-shop https://github.com/juice-shop/juice-shop/releases/tag/v13.1.0 https://github.com/juice-shop/juice-shop/releases/tag/v13.1.0 Sun, 09 Jan 2022 03:03:18 GMT juice-shop v13.1.0 adds Node.js 17.x support and updates Docker base image to Node.js 16.x • Adds pre-packaged runtime releases for `Node.js 17.x` • Updates default Docker image base from `Node.js 14.x` to `Node.js 16.x` Breaking changes: • The official Docker image no longer uses `Node.js 14.x` as the base, which may affect customizations relying on that specific runtime version. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/juice-shop https://github.com/juice-shop/juice-shop/releases/tag/v13.0.0 https://github.com/juice-shop/juice-shop/releases/tag/v13.0.0 Mon, 22 Nov 2021 13:25:47 GMT Adds challenge feedback via Google Form and allows config-based hints in the Hacking Instructor. • Adds `challenges.showFeedbackButtons` config key to enable buttons on solved challenges • Hacking Instructor tutorials now substitute static values with configurable properties via `application.domain` • Renames `challenges.showCodeSnippets` to `challenges.codingChallengesEnabled` Breaking changes: • Drops support for Internet Explorer 11 and legacy browsers requiring EcmaScript 5 • The `challenges.showCodeSnippets` configuration property is renamed to `challenges.codingChallengesEnabled` Full history on Cyber Toolchain: https://cybertoolchain.io/tools/juice-shop https://github.com/juice-shop/juice-shop/releases/tag/v12.11.0 https://github.com/juice-shop/juice-shop/releases/tag/v12.11.0 Fri, 12 Nov 2021 16:23:39 GMT v12.11.0 adds `// vuln-code-snippet neutral-line` annotation support and Node.js 16.x provisioning • Adds support for `// vuln-code-snippet neutral-line` comments in coding challenge code snippets to mark lines with no impact on verdict. • Pre-packs releases for Node.js 16.x runtime. • Drops pre-packaged release support for Node.js 15.x. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/juice-shop