Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
specterops/bloodhound
main @ 3ef386c
61
Fixes
2
CVEs
CRITICAL
Peak severity
47.2%
Coverage
Highlights
Auth Bypass: 28 prior fixes. Scrutinize any change in this area.
cmd/api/src/api/v2/auth/auth.go: most-fixed (7 issues). Treat as high-risk during review.
25 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Critical administrative capabilities and analysis actions were previously exposed to low-privilege users because of incorrect or missing permission gating, highlighting the need for explicit endpoint-level authorization checks.
Auth Bypass: The user authentication management API suffered from several structural flaws, enabling self-modification of privileges, disabling Multi-Factor Authentication (MFA) without verifying passwords, and modifying SSO-managed user roles.
Denial of Service: Cryptographic request signature validation was prone to causing out-of-memory crashes by buffering massive incoming payloads directly in memory rather than streaming them safely.