Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
buzzfeed/sso
main @ 5b8f2c3
14
Fixes
46
CVEs
CRITICAL
Peak severity
Highlights
Auth Bypass: 8 prior fixes. Scrutinize any change in this area.
internal/proxy/oauthproxy.go: most-fixed (4 issues). Treat as high-risk during review.
6 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Missing control flow returns during OAuth initialization allowed execution to proceed into upstream handlers even if the session was invalid. Developers must guarantee authorization branches exit explicitly.
Auth Bypass: Session validation lacked verification of the target host, allowing upstream domain switching attacks. Authorized domains must be sealed and validated directly inside the encrypted session state.
Auth Bypass: In-place mutation of validator configuration slices during request processing led to race conditions and potential validation bypasses. Configuration state must remain immutable.