Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

lmvdz/atrium

              main @ a0b8b4d
            

102

Fixes

CVEs

CRITICAL

Peak severity

16.7%

Coverage

Highlights

Auth Bypass: 29 prior fixes. Scrutinize any change in this area.

apps/server/src/commands.ts: most-fixed (15 issues). Treat as high-risk during review.

78 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Multiple high/critical authorization bypasses in command handling, including fail-open budget defaults, client-forged proposer identity, and TOCTOU membership checks.

Sandbox Escape: Critical sandbox escapes and command injection via forged repository handles, PATH hijacking, and unsafe subprocess environments.

Auth Bypass: Multiple certification bypasses due to optional tokens, fail-open rendering, and TOCTOU on membership checks.