Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
flyteorg/flyte
main @ 92218cf
37
Fixes
4
CVEs
CRITICAL
Peak severity
74.3%
Coverage
Highlights
Auth Bypass: 13 prior fixes. Scrutinize any change in this area.
flyteadmin: most-fixed (5 issues). Treat as high-risk during review.
13 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: The platform suffered a critical vulnerability where token signatures were not verified against the identity provider keys before parsing claims, allowing arbitrary unauthenticated request processing. Developers must ensure 'ParseUnverified' is never used to validate caller identities.
SQL Injection: Unsanitized sorting parameters passed directly to GORM order expressions allowed attackers to execute arbitrary SQL commands. Dynamic query fields must be strictly validated against an explicit model attribute allowlist.
Hardcoded Credentials: A default, well-known bcrypt hash for the flytepropeller client secret was shipped out-of-the-box, allowing unauthorized programmatic authentication if the configuration was not overridden.