Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
andrii-kryvoviaz/slink
main @ ef9d105
32
Fixes
0
CVEs
CRITICAL
Peak severity
42.9%
Coverage
Highlights
Auth Bypass: 19 prior fixes. Scrutinize any change in this area.
handlers: most-fixed (2 issues). Treat as high-risk during review.
27 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Multiple fixes in this voter show that share access (password/expiration) and owner bypass were missing or incomplete, allowing unauthorized image access via collection-scoped URLs.
Auth Bypass: ImageVoter required multiple patches to enforce share expiration and target-path access rules, indicating the voter logic was initially too permissive.
Auth Bypass: Refresh-token expiry validation was placed in the constructor, which is bypassed by the factory, allowing expired tokens to be accepted; a second fix added validation during encoding.