Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

DependencyTrack/dependency-track

              main @ 3ab5211
            

Fixes

CVEs

CRITICAL

Peak severity

42.1%

Coverage

Highlights

Auth Bypass: 22 prior fixes. Scrutinize any change in this area.

src/main/webapp/project/functions.js: most-fixed (3 issues). Treat as high-risk during review.

32 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Multiple critical bypasses were fixed, including removal of a permission check bypass and making auth enforcement mandatory, indicating a high-risk area for regressions.

Information Disclosure: ACL filtering was missing on multiple project sub-collections, leading to unauthorized project data exposure. This is a systemic issue across project-related resources.

Auth Bypass: Multiple endpoints had incorrect or missing permission requirements, allowing unauthorized access to vulnerability and finding data. Permission mapping needs careful review.