Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

Kareadita/Kavita

              develop @ aff9c74
            

Fixes

CVEs

CRITICAL

Peak severity

65.2%

Coverage

Highlights

Auth Bypass: 12 prior fixes. Scrutinize any change in this area.

API/Controllers/AccountController.cs: most-fixed (9 issues). Treat as high-risk during review.

18 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass / Privilege Escalation / Broken Access Control: Multiple historical fixes address missing authorization on account mutation endpoints (password changes, API key reset, email update) and authentication logic, enabling unauthorized privilege escalation and potential admin takeover.

Broken Access Control / Auth Bypass: Download permission checks were missing or bypassed on multiple endpoints, including OPDS download, allowing users without download rights to access content.

Broken Access Control: A critical fix added global [Authorize] and explicit role checks across all controllers, fixing unauthorized reading list mutations and potential admin takeover, indicating systemic endpoint-level authorization gaps.