Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

doctrine/migrations

              3.9.x @ 957641c
            

Fixes

CVEs

HIGH

Peak severity

Highlights

Code Injection: 1 prior fix. Scrutinize any change in this area.

lib/Doctrine/DBAL/Migrations/Tools/Console/Command/DiffCommand.php: most-fixed (1 issue). Treat as high-risk during review.

1 high-severity fix in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Code Injection: During migration generation, database platform names or SQL statements are written directly into generated PHP migration files. If an attacker can manipulate table names or other schema metadata, they can inject arbitrary PHP code that executes when the migrations are run. The fix relies on using var_export to safely format strings into executable PHP arrays.

Remote Code Execution: The integration of user-supplied command options (such as --editor-cmd) within the console commands allowed arbitrary system commands to be spawned via Symfony's Process component. This feature was ultimately removed to eliminate the command injection vector entirely.