Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

theonedev/onedev

              main @ 58b26eb
            

Fixes

CVEs

CRITICAL

Peak severity

13.3%

Coverage

Highlights

Unsafe Deserialization: 4 prior fixes. Scrutinize any change in this area.

server-plugin/server-plugin-pack-maven/src/main/java/io/onedev/server/plugin/pack/maven/MavenPackPanel.java: most-fixed (2 issues). Treat as high-risk during review.

15 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Unsafe Deserialization: 1 historical fix(es) link server-plugin/server-plugin-executor-kubernetes/src/main/java/io/onedev/server/plugin/executor/kubernetes/KubernetesResource.java to Unsafe Deserialization.

Arbitrary File Access: 1 historical fix(es) link server-core/src/main/java/io/onedev/server/migration/XmlBuildSpecMigrator.java to Arbitrary File Access.

Arbitrary File Access: 1 historical fix(es) link server-plugin/server-plugin-pack-maven/src/main/java/io/onedev/server/plugin/pack/maven/MavenPackPanel.java to Arbitrary File Access.