Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

open-metadata/openmetadata

              main @ 884349d
            

Fixes

CVEs

CRITICAL

Peak severity

27.6%

Coverage

Highlights

Authorization Bypass: 13 prior fixes. Scrutinize any change in this area.

.github/workflows/playwright-postgresql-e2e.yml: most-fixed (2 issues). Treat as high-risk during review.

31 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Authorization Bypass: 2 historical fix(es) link openmetadata-service/src/main/java/org/openmetadata/service/resources/teams/UserResource.java to Authorization Bypass.

Code Execution: 1 historical fix(es) link ingestion/src/metadata/data_quality/validations/column/base/columnRuleLibrarySqlExpressionValidator.py to Code Execution.

Authentication Bypass: 1 historical fix(es) link openmetadata-service/src/main/java/org/openmetadata/service/socket/HeaderRequestWrapper.java to Authentication Bypass.