Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

mayan-edms/Mayan-EDMS

              master @ 8da13ee
            

130

Fixes

CVEs

HIGH

Peak severity

33.3%

Coverage

Highlights

Auth Bypass: 95 prior fixes. Scrutinize any change in this area.

mayan/apps/acls/managers.py: most-fixed (7 issues). Treat as high-risk during review.

85 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Multiple fixes address ACL inheritance, filtering, and type handling, indicating a high-risk core where incomplete logic leads to unauthorized data access.

Auth Bypass: Object-level permission enforcement in REST API was missing or incorrect, leading to authorization bypasses across many endpoints.

Auth Bypass: Index views lacked ACL filtering or used incorrect permission checks, exposing index data or allowing unauthorized modifications.