GitHub repository: vulnerable-code/flask-webgoat
Description: flask-webgoat is a deliberately-vulnerable application written with the Flask web framework.