RocketChat/Rocket.Chat
develop@ bb586dc
Fixes30
CVEs21
Peak severityCritical
Commits24,645
Regression coverage9.1%
Highlights
Authorization Bypass: 15 prior fixes. Scrutinize any change in this area.
app/lib/server/functions/sendMessage.js: most-fixed (2 issues). Treat as high-risk during review.
24 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
Authorization Bypass: 2 historical fix(es) link apps/meteor/app/lib/server/methods/createToken.ts to Authorization Bypass.
Authorization Bypass: 2 historical fix(es) link apps/meteor/app/api/server/v1/autotranslate.ts to Authorization Bypass.
Authentication Bypass: 1 historical fix(es) link app/custom-oauth/server/custom_oauth_server.js to Authentication Bypass.
Last analyzed 6 Oct 2026, 20:16 UTC