Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

glpi-project/glpi

              11.0/bugfixes @ 1c7281e
            

345

Fixes

CVEs

CRITICAL

Peak severity

26.7%

Coverage

Highlights

Auth Bypass: 116 prior fixes. Scrutinize any change in this area.

src/Session.php: most-fixed (13 issues). Treat as high-risk during review.

253 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: The most frequently patched vulnerability class, with numerous fixes addressing SSO, LDAP, MFA, and session validation flaws. High risk of recurrence due to complex authentication flows and legacy code paths.

Reflected XSS: A very high number of fixes (44) across many components indicate a systemic lack of output encoding. Recurrence is likely in new UI features and AJAX endpoints.

SQL Injection: Multiple critical SQL injection fixes, especially in search and API endpoints, indicate a need for consistent parameterized queries and input sanitization.