Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
diegosouzapw/omniroute
main @ 1c18be4
230
Fixes
0
CVEs
CRITICAL
Peak severity
37.5%
Coverage
Highlights
Auth Bypass: 69 prior fixes. Scrutinize any change in this area.
open-sse/services/combo.ts: most-fixed (7 issues). Treat as high-risk during review.
126 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Critical administrative capabilities—such as database backup, process control, and model-cooldown endpoints—historically bypassed session-based JWT validation or permitted unauthenticated access by accepting standard API keys instead of enforcing strict dashboard-specific tokens.
SSRF: Unvalidated outbound requests to third-party model providers, webhooks, or favicon proxies allowed attackers to reach cloud metadata services, link-local addresses, and private loopback endpoints. Earlier implementations also suffered from incomplete substring matches on trusted hostnames (e.g., look-alike domains).
Command Injection: Use of shell-executing routines (like execSync and exec) with string interpolation rather than safe argument-safe executors permitted command injection through user-controlled parameters, system environment variables, or tool configuration settings.