Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

apache/wicket

              master @ a7a4a40
            

Fixes

CVEs

HIGH

Peak severity

50.0%

Coverage

Highlights

Authorization Bypass: 1 prior fix. Scrutinize any change in this area.

wicket-core/src/main/java/org/apache/wicket/core/util/string/JavaScriptUtils.java: most-fixed (1 issue). Treat as high-risk during review.

4 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Authorization Bypass: 1 historical fix(es) link wicket-native-websocket/wicket-native-websocket-core/src/main/java/org/apache/wicket/protocol/ws/api/AbstractWebSocketProcessor.java to Authorization Bypass.

Cross-Site Scripting: 1 historical fix(es) link wicket-core/src/main/java/org/apache/wicket/core/util/string/JavaScriptUtils.java to Cross-Site Scripting.

Path Traversal: 1 historical fix(es) link wicket-core/src/main/java/org/apache/wicket/markup/html/form/upload/resource/FolderUploadsFileManager.java to Path Traversal.