Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
causefx/Organizr
v2-master @ 6b27515
3
Fixes
0
CVEs
HIGH
Peak severity
33.3%
Coverage
Highlights
Reflected XSS: 2 prior fixes. Scrutinize any change in this area.
js/functions.js: most-fixed (2 issues). Treat as high-risk during review.
1 high-severity fix in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Reflected XSS: Two separate fixes targeted the same sink (local('set','error',...) with attacker-controlled 'error' URL parameter), indicating repeated bypasses and an ongoing risk of stored/reflected XSS through error-page rendering.
SSRF: The scrapePage function makes HTTP requests to attacker-controlled URLs without validation, allowing SSRF to internal resources; the fix added URL checks but the underlying capability remains a high-risk attack surface.