Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

the-djmaze/snappymail

              master @ c154d23
            

Fixes

CVEs

CRITICAL

Peak severity

43.5%

Coverage

Highlights

Auth Bypass: 9 prior fixes. Scrutinize any change in this area.

snappymail/v/0.0.0/app/libraries/RainLoop/Actions/UserAuth.php: most-fixed (3 issues). Treat as high-risk during review.

22 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Multiple auth bypass fixes in this component target token handling and account switching, indicating a high-risk area where session and token validation has been repeatedly insufficient.

Auth Bypass: OIDC token handling lacked an email address check, allowing token reuse across accounts; this plugin provides a privileged single-sign-on path.

Auth Bypass: 2FA verification was performed too early in the login flow, allowing bypass; moving it to a later hook was required.