Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

ether/etherpad

              develop @ ba2bbd3
            

107

Fixes

CVEs

CRITICAL

Peak severity

62.9%

Coverage

Highlights

Auth Bypass: 32 prior fixes. Scrutinize any change in this area.

src/node/db/SecurityManager.js: most-fixed (15 issues). Treat as high-risk during review.

68 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Dominant vulnerability class with 15+ fixes in this file alone; recurring flaws in session validation, read-only pad ID resolution, and authorization-level enforcement.

Path Traversal: Multiple pre-auth arbitrary file read fixes; backslash-to-slash conversion and path normalization were repeatedly abused.

Reflected XSS: Client-side HTML string concatenation with user-controlled data (error messages, URLs) repeatedly led to XSS; fixed by switching to .text()/createTextNode and escaping href.