Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
baomidou/mybatis-plus
3.0 @ 856acc1
34
Fixes
1
CVEs
CRITICAL
Peak severity
82.4%
Coverage
Highlights
Auth Bypass: 24 prior fixes. Scrutinize any change in this area.
mybatis-plus-extension: most-fixed (19 issues). Treat as high-risk during review.
32 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: The multi-tenant plugins repeatedly fail to isolate tenant data when encountering complex SQL syntax structures (e.g., Common Table Expressions/WITH clauses, RIGHT JOINs, EXISTS subqueries, and UNION SetOperationList blocks) because the interceptors fail to recursively inspect every nested AST branch to append tenant ID criteria.
SQL Injection: Allowing unsanitized columns or unescaped comment inputs into MyBatis query compilation templates directly enables attackers to execute arbitrary SQL commands when string concat or replacement operations are used in place of proper parameter binding.
Deserialization of Untrusted Data: Deserializing untrusted lambda functional expressions can lead to remote code execution. Security controls require strict signature validation and class filtering during SerializedLambda processing.