Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
pkp/ojs
main @ 53512df
100
Fixes
0
CVEs
CRITICAL
Peak severity
45.7%
Coverage
Highlights
Auth Bypass: 43 prior fixes. Scrutinize any change in this area.
templates: most-fixed (6 issues). Treat as high-risk during review.
72 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Multiple fixes address role allowlist expansion, null parameter handling, and publication status checks, indicating this policy has been repeatedly bypassed for unpublished issues.
Auth Bypass: Workflow-stage access policies were repeatedly strengthened to require stage assignment, section editor submission, and manager roles, showing the core workflow authorization surface is prone to gaps.
Auth Bypass: Fixes prevent authors from modifying published articles (adding/deleting supp files, editing metadata) and from unauthorized uploads during inactive assignments, indicating post-publication modification was a recurring bypass.