Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
stonith404/pingvin-share
main @ d5906ad
30
Fixes
0
CVEs
HIGH
Peak severity
40.7%
Coverage
Highlights
Auth Bypass: 16 prior fixes. Scrutinize any change in this area.
backend/src/auth/auth.service.ts: most-fixed (5 issues). Treat as high-risk during review.
23 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Missing or malformed roles claim in OIDC tokens could bypass role-based access control, granting unauthorized access.
Auth Bypass: Multiple authentication bypasses in password reset, password change, and session management, including LDAP user handling and session invalidation on password change.
Auth Bypass: Share token reuse across shares with same ID due to missing creation timestamp, allowing password bypass.