Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
binwiederhier/ntfy
main @ 8022401
8
Fixes
1
CVEs
CRITICAL
Peak severity
57.1%
Coverage
Highlights
Auth Bypass: 4 prior fixes. Scrutinize any change in this area.
user/manager.go: most-fixed (3 issues). Treat as high-risk during review.
4 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: The ACL engine has suffered from multiple priority ordering flaws where broader read-only rules shadowed more specific write rules or failed to properly evaluate permissions. Developers must carefully structure SQL rules to prioritize specificity and write privileges.
Auth Bypass: The SQLite driver default case-insensitive matching on topic patterns allowed unauthorized access bypasses. Stringent case-sensitivity must be enforced uniformly across the database layer.
Information Disclosure: Sensitive message content was forwarded to external notification infrastructure (Firebase) for private topics. Topics requiring read authorization must only receive generic poll requests rather than raw message payload exports.