Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

bunkerity/bunkerweb

              master @ 6a90674
            

Fixes

CVEs

CRITICAL

Peak severity

50.0%

Coverage

Highlights

Dependency Vulnerability: 4 prior fixes. Scrutinize any change in this area.

src/all-in-one/Dockerfile: most-fixed (3 issues). Treat as high-risk during review.

16 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Dependency Vulnerability: Multiple unpatched package versions (python, c-ares, expat) introduced high-severity vulnerabilities; recurring theme of failing to pin versions.

Buffer Overflow: Multiple buffer overflows in nginx and modsecurity components, requiring version bumps and bounds checks.

SSRF: Instance registration endpoint repeatedly vulnerable to SSRF via URL smuggling; multiple hardening attempts needed.