Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

amir20/dozzle

              master @ 19c01e0
            

Fixes

CVEs

CRITICAL

Peak severity

54.2%

Coverage

Highlights

Auth Bypass: 9 prior fixes. Scrutinize any change in this area.

internal/auth/users.go: most-fixed (5 issues). Treat as high-risk during review.

14 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: User container scope labels are easily bypassed or omitted during agent service queries when invoking container lookups, allowing restricted users to access unauthorized container resources. Developers must always propagate the authorization filter directly into backend RPC queries rather than filtering on the client side.

SSRF: The test-webhook endpoint allows unauthenticated attackers to supply arbitrary URLs, routing HTTP POST requests internally or to localhost. Solid protection requires checking DNS resolutions against strict IP blocklists (including broadcast and 0.0.0.0/8 ranges) within a custom dialer context.

Cross-Site WebSocket Hijacking: An insecure WebSocket upgrader lacking origin verification allowed attackers from other sites to bypass cross-origin checks and hijack interactive terminals to container systems. Utilizing standard same-origin validation is essential for upgrading connections.