Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

lmvdz/glance

              main @ 5e79e7e
            

Fixes

CVEs

CRITICAL

Peak severity

36.8%

Coverage

Highlights

Auth Bypass: 18 prior fixes. Scrutinize any change in this area.

src/server.ts: most-fixed (18 issues). Treat as high-risk during review.

65 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Information Disclosure: Recurring critical leak of daemon environment (DATABASE_URL, provider keys, master key) into agent-authored code across many spawn sites; multiple fixes evolved from denylist to positive allowlist or deny-by-default scrubbing, indicating the guard must be a complete allowlist, not a blocklist.

Auth Bypass: Multiple fail-open authorization paths: receipt truthiness, auto-approved permission requests, regression-gate identity collapse, missing role tiers, unauthenticated WS upgrades, and auto-land ignoring LAND_CONFIRM. Fixes consistently enforce fail-closed checks and RBAC tiers at both surface and chokepoint.

Path Traversal: Widespread path traversal across file-reading and file-writing endpoints, fixed with allowlist regexes, realpath containment, hashing, and server-minted IDs. The pattern is client-supplied identifiers or paths reaching fs/git operations without canonicalization.