Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
doorkeeper-gem/doorkeeper
main @ 4737ffe
96
Fixes
6
CVEs
CRITICAL
Peak severity
51.4%
Coverage
Highlights
Auth Bypass: 55 prior fixes. Scrutinize any change in this area.
lib/doorkeeper/models/access_token_mixin.rb: most-fixed (6 issues). Treat as high-risk during review.
49 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: The authorization skip logic automatically processed authorization requests without proper re-consent validation for public clients, violating RFC 8252 recommendations. Additionally, the skip_authorization block evaluated globally rather than dynamically, which could lead to unauthorized token issuance.
Auth Bypass: Token revocation endpoints historically suffered from incorrect client validation and ownership checks, allowing public clients to bypass intended boundaries and fail to revoke tokens correctly, facilitating replay attacks.
Information Disclosure: Default serialization of the Application model mixin leaked sensitive client secrets to authorized applications endpoints or nested API responses.