Damn Vulnerable GraphQL Application (DVGA) is an intentionally vulnerable GraphQL implementation designed for security testing and educational purposes. The application contains multiple security flaws including injection vulnerabilities, code execution issues, authentication bypasses, and denial of service weaknesses. These vulnerabilities are deliberately implemented to provide a controlled environment for learning GraphQL security concepts. DVGA offers two difficulty modes - Beginner and Expert - which adjust the complexity of exploitation scenarios. The application serves as a training platform for developers and security professionals to understand GraphQL-specific attack vectors and defensive techniques. A Postman collection is provided with the application, containing pre-configured requests that demonstrate solutions to the various security challenges. This collection can be imported directly into Postman for hands-on testing and learning. The platform allows users to practice identifying and exploiting GraphQL vulnerabilities in a safe, isolated environment without risking production systems.