Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

TandoorRecipes/recipes

              develop @ 8bb7071
            

Fixes

CVEs

HIGH

Peak severity

43.2%

Coverage

Highlights

Auth Bypass: 28 prior fixes. Scrutinize any change in this area.

cookbook/helper/permission_helper.py: most-fixed (20 issues). Treat as high-risk during review.

37 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: The most frequently patched class, with many fixes addressing missing owner/space/group checks, superuser bypasses, and inconsistent permission logic. The high count indicates systemic weaknesses in the permission model.

Access Control: Multiple API viewsets had missing or incorrect permission classes, allowing unauthorized cross-user or cross-space access. Fixes often involved replacing broad permissions with owner-based ones.

Auth Bypass: Signup and password reset flows had multiple bypasses, including social auth signup when disabled, missing invite token validation, and password reset email logic errors.