Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
umami-software/umami
master @ ca661c7
91
Fixes
0
CVEs
CRITICAL
Peak severity
20.0%
Coverage
Highlights
Auth Bypass: 61 prior fixes. Scrutinize any change in this area.
lib/auth.js: most-fixed (9 issues). Treat as high-risk during review.
76 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Recurring failures in core authorization logic: token parsing, user ID extraction, null checks, and permission functions. Many fixes correct inverted logic, wrong field comparisons, or missing admin checks, indicating a high-risk central auth surface.
Auth Bypass: Share token permissions repeatedly allowed unauthorized access to websites, boards, pixels, and links. Fixes restrict section flags, entity types, and require share context, but the surface is broad and prone to regressions.
Auth Bypass: Board creation/update/clone lacked validation that referenced reports/entities were accessible, enabling cross-user data exposure. Multiple fixes address entity permission checks and component sanitization.