Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

tiangolo/fastapi

              master @ cecd96d
            

Fixes

CVEs

HIGH

Peak severity

45.5%

Coverage

Highlights

Auth Bypass: 6 prior fixes. Scrutinize any change in this area.

fastapi/routing.py: most-fixed (5 issues). Treat as high-risk during review.

4 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Sub-dependencies or dependency overrides can pollute or fail to propagate OAuth scopes, leading to shared cache hits across different security contexts and bypassing access controls.

Denial of Service: Recursive Pydantic response models can trigger infinite recursion during schema cloning, causing immediate application crashes.

CSRF: Inadequate Content-Type validation on incoming JSON payloads allows browser-based cross-site requests to execute unauthorized actions on cookie-authenticated endpoints.