Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
kunmoe/kun-galgame-forum
master @ 442f3b3
34
Fixes
0
CVEs
CRITICAL
Peak severity
75.9%
Coverage
Highlights
Auth Bypass: 17 prior fixes. Scrutinize any change in this area.
apps/api/internal/app/router.go: most-fixed (3 issues). Treat as high-risk during review.
12 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: A critical authentication bypass occurred across all API endpoints because the application did not await the asynchronous token verification function getCookieTokenInfo, allowing unauthenticated requests to proceed.
Auth Bypass: Verification codes were vulnerable to collision and reuse attacks. Keys stored in Redis lacked namespace isolation by action type and were not immediately invalidated upon successful validation.
Stored XSS: Unsanitized compiled Markdown output directly generated from goldmark parser input led to stored cross-site scripting (XSS) risks before server-side HTML sanitization was enforced.