Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

ZoneMinder/zoneminder

              master @ 90c95d2
            

398

Fixes

CVEs

CRITICAL

Peak severity

35.1%

Coverage

Highlights

Auth Bypass: 101 prior fixes. Scrutinize any change in this area.

web/includes/functions.php: most-fixed (28 issues). Treat as high-risk during review.

276 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: The largest risk class with over 100 fixes; recurring flaws in token validation, session handling, and per-monitor/per-event permission checks (canView/canEdit) allowed unauthorized data access and privilege escalation.

Memory Corruption: Dozens of fixes in image and monitor code for buffer overflows, out-of-bounds reads/writes, and use-after-free, often from incorrect linesize/stride handling or unsafe pointer arithmetic.

SQL Injection: Recurring SQL injection via unsanitized filter attributes, ORDER BY columns, and user-controlled IDs; fixes added allowlists, parameterized queries, and input validation.