Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

go-goyave/goyave

              master @ f3ae5f2
            

Fixes

CVEs

CRITICAL

Peak severity

60.0%

Coverage

Highlights

Auth Bypass: 3 prior fixes. Scrutinize any change in this area.

auth/jwt_controller.go: most-fixed (2 issues). Treat as high-risk during review.

3 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Improper handling of database query errors ('gorm.ErrRecordNotFound') during login lookup allowed authentications for non-existent users to bypass password validation steps. This highlights the critical need to explicitly handle database-level errors prior to processing credentials.

Auth Bypass: Weaknesses in the JWT key function could allow attackers to bypass token validation by passing nil or unexpected signing methods (e.g. 'none' algorithm attacks) to 'jwt.ParseWithClaims'.

Auth Bypass: Routes intended to be public, such as the initial login endpoint, can cause issues if parent router middleware configuration globally enforces JWT authentication, requiring explicit route-level exemption metadata configuration.