Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
twentyhq/twenty
main @ 0d66dd1
42
Fixes
10
CVEs
CRITICAL
Peak severity
32.3%
Coverage
Highlights
Authorization Bypass: 16 prior fixes. Scrutinize any change in this area.
packages/twenty-server/src/engine/core-modules/file-storage/drivers/local.driver.ts: most-fixed (3 issues). Treat as high-risk during review.
39 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Path Traversal: 3 historical fix(es) link packages/twenty-server/src/engine/core-modules/file-storage/drivers/local.driver.ts to Path Traversal.
Authentication Bypass: 1 historical fix(es) link packages/twenty-server/src/engine/core-modules/application/application-oauth/oauth.service.ts to Authentication Bypass.
Authorization Bypass: 1 historical fix(es) link packages/twenty-server/src/engine/core-modules/user-session/user-session.resolver.ts to Authorization Bypass.