Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
hellozeronet/zeronet
py3 @ 454c0b2
35
Fixes
0
CVEs
CRITICAL
Peak severity
41.4%
Coverage
Highlights
Auth Bypass: 9 prior fixes. Scrutinize any change in this area.
src/Content/ContentManager.py: most-fixed (6 issues). Treat as high-risk during review.
17 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: The Multiuser plugin has historically suffered from authorization bypasses due to case-normalization issues in command blocklists and failures to disable critical administrative operations when running in proxy mode. Failure to enforce lowercase canonicalization allows restricted commands to be executed.
Sandbox Escape: Confinement of sandboxed sites is vulnerable to bypasses if iframe sandbox attributes are configured loosely (e.g., allowing popups to escape) or lack cryptographic nonce enforcement to validate secure content wrapper execution.
Path Traversal: Local file-serving endpoints in the UI request handler have repeatedly leaked sensitive configuration files outside the expected data root due to inadequate path canonicalization and insufficient validation of relative path sequences.