Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

hahwul/gori

              main @ 1a33327
            

Fixes

CVEs

CRITICAL

Peak severity

23.7%

Coverage

Highlights

Request Smuggling: 14 prior fixes. Scrutinize any change in this area.

src/gori/proxy/conn/client_conn.cr: most-fixed (9 issues). Treat as high-risk during review.

71 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Request Smuggling: Multiple fixes address request smuggling via framing ambiguities, obfuscated headers, and chunk-size parsing flaws. The proxy's codec is the most frequently patched area, indicating a persistent risk of desync between proxy and origin.

Command Injection: Command injection appears in decoder chains, MCP decode tool, curl export, and settings import. These paths allow execution of arbitrary commands via crafted input, often requiring explicit opt-in gates that were missing or bypassed.

SSRF: SSRF vulnerabilities arise from outbound sends lacking scope/sandbox gates, and from proxy paths that dial client-controlled destinations. Centralized gating was added but sibling paths (SOCKS5, transparent listener) initially missed it.