Open source repositories tagged with #owasp-top-ten, ranked by health score.
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application