Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
doctrine/annotations
2.0.x @ 17815fb
4
Fixes
1
CVEs
HIGH
Peak severity
Highlights
Path Traversal: 2 prior fixes. Scrutinize any change in this area.
tests/cc.php: most-fixed (2 issues). Treat as high-risk during review.
2 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Insecure Temporary File: Insecure file permission defaults (0777/0666) during cache directory and file creation allowed local attackers to write malicious payloads into cached PHP scripts, resulting in potential local code execution. This is a highly critical risk given the library's integration into server-side execution environments.
Path Traversal: The test code coverage component lacked proper input sanitization on user-supplied 'file' parameters, enabling attackers to read arbitrary system files via directory traversal sequences.
Validation Bypass: A regular expression matching omission allowed validation bypasses because the pattern did not enforce the PCRE_DOLLAR_ENDONLY modifier (/D), potentially permitting malformed input containing trailing newlines to pass checks.