cvat-ai/cvat
develop@ ae98613Fixes15
CVEs15
Peak severityCritical
Commits5,800
Regression coverage20.0%
Highlights
Authorization Bypass: 4 prior fixes. Scrutinize any change in this area.
cvat/apps/engine/permissions.py: most-fixed (3 issues). Treat as high-risk during review.
15 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
Authorization Bypass: 2 historical fix(es) link cvat/apps/engine/permissions.py to Authorization Bypass.
Unsafe Deserialization: 1 historical fix(es) link cvat/apps/lambda_manager/views.py to Unsafe Deserialization.
Authentication Bypass: 1 historical fix(es) link cvat/apps/iam/authentication.py to Authentication Bypass.
Last analyzed 30 Sep 2026, 02:51 UTC