Issues

• [Bug]: sensitive_data_exposure lab can't be used under Docker Compose (DisallowedHost, then 401 after logging into the lab)

  adeyosemanputra/pygoat#580 · Filter by author PRAteek-singHWY opened on Nov 5, 2026

• Security contact request

  adeyosemanputra/pygoat#571 · Filter by author PRAteek-singHWY opened on Oct 29, 2026

• [Bug]: Lab images use end-of-life Python 3.9/3.8 and Hadolint CI has been failing since March

  adeyosemanputra/pygoat#561 · Filter by author PRAteek-singHWY opened on Oct 21, 2026

• [UX] Sidebar shown on login page, non-working Google login button, and home page clutter

  adeyosemanputra/pygoat#547 · Filter by author SyedSameer24 opened on Aug 27, 2026

• Unused Import: BestMatch Imported But Never Used Directly

  adeyosemanputra/pygoat#509 · Filter by author mohityadav8 opened on Apr 4, 2026

• [Feature]: Add OWASP Top 10: 2025 vulnerability labs

  adeyosemanputra/pygoat#490 · Filter by author SankalpGhasti-dev opened on Mar 29, 2026

• [Feature]: Add dockerized CSRF lab (MITRE CWE-352)

  adeyosemanputra/pygoat#454 · Filter by author ANIRUDH-SJ opened on Mar 24, 2026
  1

• Feat (A06:2025): Add Vulnerable and Outdated Components Lab

  adeyosemanputra/pygoat#428 · Filter by author Aynlie opened on Mar 18, 2026
  1

• Add proper SECURITY.md policy for vulnerability reporting

  adeyosemanputra/pygoat#421 · Filter by author mohityadav8 opened on Mar 16, 2026
  3

• [feat] Improve UX pygoat v3

  adeyosemanputra/pygoat#397 · Filter by author RupakBiswas-2304 opened on Feb 28, 2026
  8

  

• Feat: Implement Blind Sql Injection Lab

  adeyosemanputra/pygoat#393 · Filter by author saniyafatima07 opened on Feb 27, 2026
  2

• A10: 2025 Mishandling of Exceptional Conditions - Fail-Open Authorization (CWE-636)

  adeyosemanputra/pygoat#370 · Filter by author arceuzvx opened on Feb 5, 2026
  1

• [Feature] Make the side bar persist it's state after going to a new page.

  enhancement
  adeyosemanputra/pygoat#360 · Filter by author RupakBiswas-2304 opened on Feb 1, 2026
  3

• A01: BROKEN ACCESS CONTROL

  adeyosemanputra/pygoat#354 · Filter by author ANIRUDH-SJ opened on Jan 30, 2026
  

• A04:2025 Cryptographic Failures Lab

  adeyosemanputra/pygoat#350 · Filter by author immortal71 opened on Jan 28, 2026
  9

• A10 : 2025 Mishandling of Exceptional Conditions Lab

  adeyosemanputra/pygoat#333 · Filter by author kunal-595 opened on Jan 17, 2026
  5

  

• [OWASP A09:2025] Add silent privilege escalation lab to A09:2025

  adeyosemanputra/pygoat#328 · Filter by author Hare-Krishn opened on Jan 14, 2026
  2

• Extend A08 software_integrity_lab with Lab 3: Unsigned update / plugin integrity failure

  adeyosemanputra/pygoat#325 · Filter by author VyRajaRao opened on Jan 12, 2026
  1

• XSS Lab 2: Case-sensitive script tag filter allows trivial bypass

  adeyosemanputra/pygoat#314 · Filter by author immortal71 opened on Jan 4, 2026
  5