Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
m1k1o/neko
master @ d74052b
34
Fixes
1
CVEs
CRITICAL
Peak severity
50.0%
Coverage
Highlights
Auth Bypass: 17 prior fixes. Scrutinize any change in this area.
internal/session/manager.go: most-fixed (4 issues). Treat as high-risk during review.
10 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Inconsistent and complex routing authorization allowed users to bypass privilege validation. The project had to consolidate its authorization model under unified JWT middleware to close exposure vectors across protected API routes.
Command Injection: Insufficient input validation in raw C system execution allowed command injection. The layout parameter passed to the shell execution within SetKeyboard lacked adequate length controls and sanitization.
Denial of Service: Failing to guarantee the cleanup of temporary multipart files on either processing failures or successful handoffs led to persistent disk storage exhaustion.