Security context

Highlights

Auth Bypass: 49 prior fixes. Scrutinize any change in this area.

src/api/routes.ts: most-fixed (17 issues). Treat as high-risk during review.

59 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

Auth Bypass: Automated merging and state-transition processes lacked synchronized atomic checks, allowing malicious actors to exploit a Time-of-Check to Time-of-Use (TOCTOU) window via force-pushes immediately after authorization checks were validated. This allowed unreviewed commits to bypass branch protection.

Auth Bypass: The shared end-user MCP credential could perform unauthorized cross-repository reads and management actions across arbitrary repositories due to missing allowlist validation on static tokens.

ReDoS: Nested and backtracking regular expressions exposed parsing functions to Denial of Service via catastrophic backtracking on complex, adversarial patch inputs. These required rewrites to use linear hand-written character scans.