Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
bovigo/vfsstream
master @ dd9277d
7
Fixes
0
CVEs
MEDIUM
Peak severity
100.0%
Coverage
Highlights
Permission Bypass: 7 prior fixes. Scrutinize any change in this area.
vfsStreamWrapper.php: most-fixed (7 issues). Treat as high-risk during review.
0 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Permission Bypass: Multiple operations (open, read, write, unlink, rename, mkdir) historically lacked proper permission checks, allowing unauthorized file access or modification.
Permission Bypass: chmod, chown, and chgrp allowed permission changes without verifying that the current user owns the file, enabling privilege escalation.
Permission Bypass: unlink() incorrectly checked file writability instead of parent directory writability, allowing deletion of files in read-only directories.