Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

go-gorm/gorm

              master @ 1d6ce99
            

Fixes

CVEs

CRITICAL

Peak severity

Highlights

SQL Injection: 3 prior fixes. Scrutinize any change in this area.

scope.go: most-fixed (3 issues). Treat as high-risk during review.

2 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

SQL Injection: Unvalidated column names and raw ordering clauses in Order clauses allowed attackers to inject arbitrary SQL. The fix introduced stricter regex validation and selective quoting on column names.

SQL Injection: Schema, index, and key operations exposed raw execution sinks where unsafe names could bypass filters. This was addressed by introducing path validation regexes and the QuoteIfPossible helper.

SQL Injection: Nested table identifiers (e.g., database.table) could bypass standard quoting if evaluated as a single string. The fix ensures identifiers are split on dot separators and each segment is individually quoted via QuotedTableName.