Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

TYPO3/typo3

              main @ d68817d
            

556

Fixes

CVEs

CRITICAL

Peak severity

39.5%

Coverage

Highlights

Reflected XSS: 144 prior fixes. Scrutinize any change in this area.

typo3/sysext/core/Classes/Authentication/AbstractUserAuthentication.php: most-fixed (17 issues). Treat as high-risk during review.

372 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Reflected XSS: Dominant vulnerability class with 144 fixes; recurring missing output encoding (htmlspecialchars, quoteJSvalue) in HTML/JS contexts across many components.

Auth Bypass: 118 fixes; recurring missing permission checks (tables_modify, page access, language access) in record operations and module access.

Insecure Deserialization: 17 fixes; unsafe unserialize with object injection potential, mitigated by allowed_classes=false or HMAC signatures.