Security context

Highlights

Auth Bypass: 21 prior fixes. Scrutinize any change in this area.

src/middleware/jwt/index.ts: most-fixed (5 issues). Treat as high-risk during review.

30 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

Auth Bypass: The JWT middleware suffered from critical signature verification bypasses when initialized without a secret, or when signature algorithm enforcement was missing or influenced by attackers via algorithm confusion. Failure to immediately return on verification errors allowed downstream handlers to execute anyway.

Path Traversal: Static file serving was vulnerable to path traversal attacks across different platforms (particularly on Windows or Deno runtimes) due to inconsistent URL decoding, missing path canonicalization, and inadequate verification of parent directory dot-dot (..) segments.

Auth Bypass: IP-restriction middleware was bypassed due to improper normalization of IPv6 unspecified and IPv4-mapped IPv6 addresses, as well as weak numerical CIDR validation, causing rules to map incorrectly or be skipped entirely.