Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

Termix-SSH/Termix

              main @ 42f8270
            

Fixes

CVEs

CRITICAL

Peak severity

66.7%

Coverage

Highlights

Auth Bypass: 2 prior fixes. Scrutinize any change in this area.

src/backend/database/routes/users.ts: most-fixed (2 issues). Treat as high-risk during review.

9 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

SSRF: Two separate fixes were required to enforce DNS validation on outbound fetches, indicating the protection was initially incomplete or regressed. Any new fetch path that bypasses this utility risks SSRF.

Command Injection: Unsanitized containerId and timestamp flowed into client.exec, allowing arbitrary command execution. Validation via regex and shell allowlist was added; any new Docker endpoint must reuse this pattern.

Command Injection: Double-quoted shell interpolation in archive operations allowed injection. The fix switched to single-quote escaping; similar patterns in other file operations must be audited.