Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

papermerge/papermerge-core

              master @ 4a69d09
            

Fixes

CVEs

CRITICAL

Peak severity

Highlights

Auth Bypass: 20 prior fixes. Scrutinize any change in this area.

papermerge/core/db/common.py: most-fixed (2 issues). Treat as high-risk during review.

16 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Recursive hierarchical permission checks and multi-tenant group ownership checks were missing, allowing unauthorized access to ancestral and sibling node structures across tenants.

Auth Bypass: JSON Web Token validation lacked adequate scope checking and signature/expiration verification, which could allow clients to forge identities or bypass token restrictions.

Auth Bypass: Using an insufficient permission level (PAGE_VIEW instead of NODE_VIEW) to authorize access to document thumbnails led to unauthorized document leakage.