Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

SonarSource/sonarqube

              master @ e7bb882
            

272

Fixes

CVEs

CRITICAL

Peak severity

48.6%

Coverage

Highlights

Auth Bypass: 159 prior fixes. Scrutinize any change in this area.

server/sonar-webserver-auth/src/main/java/org/sonar/server/authentication/OAuth2AuthenticationParametersImpl.java: most-fixed (4 issues). Treat as high-risk during review.

212 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: The single most common vulnerability class, with over 150 fixes. Many involve permission checks that are missing, performed after resource lookups (allowing enumeration), or scoped incorrectly (global vs organization vs project). This pattern recurs across many web service actions.

Auth Bypass: Multiple fixes address authentication bypass in external identity providers: missing CSRF state verification, weak SAML strict mode, insufficient external ID matching, and overly permissive group matching. These are critical for account takeover and unauthorized access.

Reflected XSS: Dozens of fixes address XSS from unescaped user-controlled or stored values in templates and client-side rendering. Common sinks include dangerouslySetInnerHTML, unescaped ERB output, and unsafe URL handling.