If you look at https://owasp.org/www-project-vulnerable-web-applications-di... and click the "offline" tab you'll see a load of apps there.

I think https://www.vulnhub.com/ has quite a few.

You can download and run Juice Shop offline locally.