Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

amberframework/amber

              master @ aa427c7
            

Fixes

CVEs

HIGH

Peak severity

41.7%

Coverage

Highlights

Auth Bypass: 3 prior fixes. Scrutinize any change in this area.

CORS: most-fixed (2 issues). Treat as high-risk during review.

12 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: A critical lifecycle bug allowed controller actions to execute even after a redirect or halt was called in pre-action filters. Developers must ensure that all controller filter implementations explicitly terminate the request execution flow.

Command Injection: The use of shell-evaluated execution pipelines via `system` allowed arbitrary command injection. Utilizing argument-vector-based Process runners prevents shell parsing of untrusted user input.

CORS Misconfiguration: CORS origin and preflight states were memoized in instance variables, leading to state leakage and security bypasses across different client requests. Keeping middleware instances stateless across concurrent requests is critical.