Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

litl/rauth

              master @ a6d887d
            

Fixes

CVEs

HIGH

Peak severity

Highlights

Auth Bypass: 2 prior fixes. Scrutinize any change in this area.

rauth/service.py: most-fixed (2 issues). Treat as high-risk during review.

1 high-severity fix in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Cryptographically Weak Pseudo-Random Number Generator (PRNG): Insecure PRNG usage in session generation compromises the unpredictability of OAuth state or nonce parameters, allowing attackers to hijack or predict active sessions. Utilizing a cryptographically secure alternative is mandatory.

Auth Bypass: Generating and transmitting 'Bearer None' authorization headers when access tokens are missing can lead to authentication bypasses on upstream resource servers that fail to strictly reject 'None' strings.

Path Traversal: Using naive string concatenation instead of robust URL joining for base URLs and URIs allows attackers to manipulate path segments, potentially escaping the intended API endpoint path or triggering open redirects.