This is a collection of Java demo apps that are vulnerable in different ways.

It's divided into modules, each one having its own README:

• Todolist Goof
• Log4Shell Goof
• Quickstart for running both Todolist with Log4Shell in Kubernetes