Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
lissy93/dashy
master @ ea1cb11
33
Fixes
1
CVEs
HIGH
Peak severity
40.0%
Coverage
Highlights
Auth Bypass: 15 prior fixes. Scrutinize any change in this area.
services/cors-proxy.js: most-fixed (4 issues). Treat as high-risk during review.
15 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: The application failed to enforce authentication across all routes when OIDC or Keycloak was active, allowing unauthenticated users to fetch non-root configurations or bypass authorization middleware entirely. Subsequent fixes added restrictive middleware and configuration stripping.
Path Traversal: A lack of strict path validation in the configuration saving endpoint allowed potential path traversal during file operations. This is directly related to CVE-2023-5916, where arbitrary configuration management could lead to unauthorized access or modification.
SSRF: The CORS proxy utility could be used to target internal resources or cloud metadata endpoints. Fixes established a strict blocklist on redirects and a host validation allowlist to prevent arbitrary internal requests.