Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
kvesteri/sqlalchemy-utils
master @ f5ccb48
2
Fixes
0
CVEs
HIGH
Peak severity
0.0%
Coverage
Highlights
Auth Bypass: 1 prior fix. Scrutinize any change in this area.
sqlalchemy_utils/types/password.py: most-fixed (2 issues). Treat as high-risk during review.
2 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: A logic bug allowed a NULL user input compared against a NULL password hash to evaluate to True. This bypasses authentication completely, allowing unauthorized access with empty passwords. Guarding comparison logic against null values is critical.
Cryptographic Issues: The use of a reversible encryption function instead of a secure, one-way cryptographic hash function exposed sensitive user passwords to decryption risk in the event of a database compromise.