Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

ente-io/ente

              main @ 1156ab5
            

126

Fixes

CVEs

CRITICAL

Peak severity

29.7%

Coverage

Highlights

Auth Bypass: 43 prior fixes. Scrutinize any change in this area.

server/pkg/controller/user/userauth.go: most-fixed (4 issues). Treat as high-risk during review.

42 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: The OTP and OTT validation mechanisms previously contained flaws where failures to find or delete rows, or omission of user key prechecks, allowed validation replay or unauthenticated registration. Developers must ensure database state change results are strictly verified.

Cryptographic Issues: Critical race conditions occurred when keygen and stream initialization functions were invoked before the underlying libsodium WASM wrapper was fully ready, or when logical operators bypassed intended encryption keys. Complete lifecycle synchronization is mandatory.

Sandbox Escape: Incorrect Electron window configurations disabled renderer process sandboxing and context isolation, while overly permissive preload scripts allowed privileged IPC communication from insecure contexts to the main process.