Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

Bubka/2FAuth

              master @ b823160
            

Fixes

CVEs

CRITICAL

Peak severity

62.5%

Coverage

Highlights

Auth Bypass: 22 prior fixes. Scrutinize any change in this area.

app/Http/Middleware/AddContentSecurityPolicyHeaders.php: most-fixed (3 issues). Treat as high-risk during review.

30 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: WebAuthn login allowed authentication without an email, letting any user log in as any account. This is a complete authentication bypass.

Auth Bypass: Reverse-proxy authentication trusted proxy headers without verifying the request source, enabling header spoofing and full auth bypass.

Auth Bypass: Authorization for reordering/deleting accounts used the first fetched account as the model, allowing cross-user manipulation by including an owned ID first.