Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

lintsinghua/deepaudit

              v3.0.0 @ 6a99a07
            

Fixes

CVEs

HIGH

Peak severity

20.0%

Coverage

Highlights

SSRF: 3 prior fixes. Scrutinize any change in this area.

backend/app/api/v1/endpoints/embedding_config.py: most-fixed (2 issues). Treat as high-risk during review.

3 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

SSRF: The embedding configuration test endpoints are highly susceptible to timing-based side-channel SSRF, allowing attackers to perform internal port scanning and map network topologies by analyzing precise differences in response delays.

Privilege Escalation: Inadequate access control on the user-reading endpoint allowed any authenticated standard user to list all registered users and harvest sensitive personal data.

Broken Object Level Authorization: A lack of ownership filtering in project, task, and issue database queries allowed users to view and manipulate resources belonging to other tenants.