Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

ktorio/ktor

              main @ 78c75cf
            

Fixes

CVEs

CRITICAL

Peak severity

42.5%

Coverage

Highlights

Auth Bypass: 23 prior fixes. Scrutinize any change in this area.

ktor-features/ktor-auth: most-fixed (9 issues). Treat as high-risk during review.

35 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Path Traversal: Insecure handling of relative navigation sequences in static resource routing allows arbitrary local file reads. Developers must ensure that resource resolution strictly blocks directory traversal tokens.

HTTP Request Smuggling: Lenient parsing of chunked encoding, bare carriage returns (CR) as line delimiters, and whitespace handling within the CIO engine allows request smuggling and parsing discrepancies.

Auth Bypass: Flaws in OAuth2 state/nonce verification and digest authentication parameters allowed authentication bypass. Challenge pipelines failed to execute correctly on error, permitting requests to reach protected routes.