Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
chatgpt-web-dev/chatgpt-web
main @ 23237f5
8
Fixes
0
CVEs
HIGH
Peak severity
33.3%
Coverage
Highlights
Auth Bypass: 5 prior fixes. Scrutinize any change in this area.
service/src/index.ts: most-fixed (2 issues). Treat as high-risk during review.
6 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Critical backend routes like '/chat-process' and '/config' were historically exposed without proper authentication middleware or administrator role validation. Attackers could interact with the model or read/write system configuration unauthorized.
Auth Bypass: Authorization middleware failed to thoroughly validate that users associated with JWT tokens actually existed and remained in active status before granting access.
Auth Bypass: Inverted arguments in frontend route guards ('to' and 'from' parameters) caused navigation checks to execute with swapped context, potentially allowing users to bypass route permissions.