Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

elie222/inbox-zero

              main @ 5182141
            

104

Fixes

CVEs

CRITICAL

Peak severity

31.4%

Coverage

Highlights

Auth Bypass: 43 prior fixes. Scrutinize any change in this area.

apps/web/utils/auth.ts: most-fixed (12 issues). Treat as high-risk during review.

66 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Insecure OAuth configurations, including implicit account-linking with untrusted providers and lack of state verification, historically allowed unauthorized account takeovers. Additionally, minor logic errors in token expiration math and session header extraction caused bypasses.

SSRF: The image proxy and webhook validation components were vulnerable to SSRF via DNS rebinding, private IP ranges, and 6to4 IPv6 tunneling. Exploits allowed attackers to probe internal cloud environments and query arbitrary endpoints.

Broken Access Control: Using mutable email string inputs instead of validated, database-enforced emailAccountIds across various routes allowed users to query or manipulate resources belonging to other tenants.