Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
python-caldav/caldav
master @ 62c5e51
4
Fixes
0
CVEs
HIGH
Peak severity
25.0%
Coverage
Highlights
Credential Confusion: 1 prior fix. Scrutinize any change in this area.
caldav/async_davclient.py: most-fixed (2 issues). Treat as high-risk during review.
3 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Credential Confusion: URL credentials can override explicit authentication arguments, leading to authentication with wrong or attacker-injected credentials.
Information Disclosure: Stored URL retains credentials, risking leakage through logs, errors, or serialization.
SSRF: DNS SRV/TXT and well-known redirects can point the client to an attacker-controlled domain, enabling SSRF or data exfiltration.