Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

ovexro/dockpanel

              main @ 38f91c0
            

143

Fixes

CVEs

CRITICAL

Peak severity

25.0%

Coverage

Highlights

Auth Bypass: 20 prior fixes. Scrutinize any change in this area.

panel/backend/src/routes/auth.rs: most-fixed (7 issues). Treat as high-risk during review.

121 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass / Broken Access Control: Multiple handlers lacked admin/ownership gates, allowing cross-tenant data access, privilege escalation to root shell, and unauthorized state changes.

SSRF: Outbound HTTP clients repeatedly followed redirects or failed to pin DNS resolution, enabling access to internal addresses via DNS rebinding or IPv6/ULA bypasses.

Path Traversal / Command Injection: User-controlled paths and shell commands were frequently unsanitized, enabling arbitrary file writes, sandbox escapes, and RCE.