GitHub repository: mcsnyk/java-goof
Primary language: Java
Description: A vulnerable demo application, initially based on Ben Hassine's TodoMVC.