Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

civitai/civitai

              main @ 0368bff
            

188

Fixes

CVEs

CRITICAL

Peak severity

20.5%

Coverage

Highlights

Auth Bypass: 85 prior fixes. Scrutinize any change in this area.

src/server/services/article.service.ts: most-fixed (9 issues). Treat as high-risk during review.

86 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Denial of Service: The platform suffered from catastrophic regular expression backtracking (ReDoS) during prompt auditing on non-Latin and long inputs. Fixes involved replacing greedy word boundaries with zero-width lookaround assertions and capping prompt lengths.

SQL Injection: Raw ClickHouse template query interpolation enabled SQL injection via pagination and player history cursors. Mitigation required strict type coercion and validating variables using structured Zod schemas.

Auth Bypass: Bypasses occurred because user session revocation was delayed or masked by debounce caches, allowing banned or muted accounts to maintain active sessions. Hardening introduced real-time WebSocket signaling, database-backed token checks, and atomic redis updates.