Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
lmnr-ai/lmnr
main @ f9f4954
38
Fixes
0
CVEs
CRITICAL
Peak severity
50.0%
Coverage
Highlights
Auth Bypass: 15 prior fixes. Scrutinize any change in this area.
frontend/app/sign-in/page.tsx: most-fixed (2 issues). Treat as high-risk during review.
23 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
SQL Injection: Raw SQL metric expressions, ClickHouse queries, and aliases were susceptible to injection due to insufficient parsing and validation of user-controlled properties. Mitigation required implementing AST-aware validation and auto-regeneration.
Auth Bypass: The application struggled with decentralized authorization checks across workspace and project-scoped routes. Vulnerabilities in invitation acceptance, Slack integration, and workspace project listings allowed unauthenticated or cross-tenant access until centralized middleware validation was introduced.
Open Redirect: Redirect logic using search parameters like callbackUrl or workspaceId was vulnerable to open redirection and path traversal if arbitrary external URLs or non-UUID values were processed without validation.