Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

GeoLatte/geolatte-featureserver

              master @ 8cb1444
            

Fixes

CVEs

CRITICAL

Peak severity

33.3%

Coverage

Highlights

SQL Injection: 2 prior fixes. Scrutinize any change in this area.

app/controllers/DatabasesController.scala: most-fixed (1 issue). Treat as high-risk during review.

3 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

SQL Injection: JSONPath strings and SQL literals were concatenated into query strings without escaping, allowing injection through user-controlled values. The fix introduced escaping helpers but sibling paths may still miss them.

SQL Injection: SQL literals, WKT, and identifiers were concatenated without escaping, enabling injection via multiple value types. The fix added safeLiteralString, safeWkt, and safeIdentifier, but other renderers or query paths may not use them consistently.

Auth Bypass: Database management endpoints used withRepository without any authentication, allowing unauthenticated access. The fix added ifHasRights, but other controller actions or repository access paths may still lack this check.