Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
keystonejs/keystone
main @ a92fd44
97
Fixes
50
CVEs
CRITICAL
Peak severity
51.4%
Coverage
Highlights
Auth Bypass: 59 prior fixes. Scrutinize any change in this area.
@keystone-next/auth: most-fixed (5 issues). Treat as high-risk during review.
53 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Bypassing field-level filter access controls via malformed queries or query arguments (like the cursor argument in findMany) can allow unauthorized users to extract sensitive data.
Auth Bypass: Flaws in session validation logic, such as accepting raw session data when database matches fail or failing to validate list keys, allow unauthorized users to gain administrative context.
Auth Bypass: Utilizing a shared general context instead of a request-specific user context within middleware allows unauthenticated requests to bypass access controls.