Tags: CSPF-Founder/JavaVulnerableLab

V1.0 - OWASP Top 10 2025

Realigns the lab with the OWASP Top 10 2025 categories and adds the
challenges the new list requires:

- A01 Broken Access Control: JWT claim tampering, SSRF
- A02 Security Misconfiguration: directory listing, debug mode
- A03 Software Supply Chain Failures: Log4Shell
- A05 Injection: OS command injection
- A06 Insecure Design: unrestricted file upload, OTP step-up bypass
- A07 Authentication Failures: hard-coded front-end secrets, session ID in URL
- A08 Software & Data Integrity Failures: Java deserialization, missing SRI
- A09 Security Logging & Alerting Failures: log injection
- A10 Mishandling of Exceptional Conditions: fail-open check, incomplete rollback

Navigation, seed data and styling were reworked to match.

Create LICENSE