Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

drakkan/sftpgo

              main @ 55d523f
            

Fixes

CVEs

CRITICAL

Peak severity

47.2%

Coverage

Highlights

Auth Bypass: 19 prior fixes. Scrutinize any change in this area.

httpd/auth_utils.go: most-fixed (6 issues). Treat as high-risk during review.

46 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Multiple fixes address authentication bypasses through token/session weaknesses, including predictable state/nonce values, missing audience checks, and insufficient token invalidation. These are high-risk because they can allow unauthorized access to administrative or user functions.

Path Traversal: Path traversal vulnerabilities have been fixed in multiple components, including VFS, SFTP/FTPS handlers, and ZIP downloads. These stem from inconsistent path normalization, symlink handling, and boundary checks, allowing escape from intended directories.

Permission Bypass: Several fixes address permission bypasses in file operations (copy, rename, symlink, hash, system commands) where source paths or recursive directory permissions were not checked. This allows users to access or manipulate files they should not.