Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

apache/streampark

              dev @ de2bc56
            

Fixes

CVEs

CRITICAL

Peak severity

47.6%

Coverage

Highlights

Auth Bypass: 19 prior fixes. Scrutinize any change in this area.

ApplicationController.java: most-fixed (2 issues). Treat as high-risk during review.

22 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Multiple fixes addressed JWT signing with user password, static expiration, and token validation using username instead of user ID, indicating a high-risk token lifecycle.

Auth Bypass: Authorization bypasses related to team permissions and token checks, indicating a fragile permission model across teams.

Auth Bypass: Multiple fixes in LDAP login and user creation indicate a weak LDAP integration prone to credential bypass and injection.