Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

mnfst/manifest

              main @ 1131013
            

111

Fixes

CVEs

CRITICAL

Peak severity

45.7%

Coverage

Highlights

Auth Bypass: 39 prior fixes. Scrutinize any change in this area.

packages/core/manifest/src/auth/auth.service.ts: most-fixed (6 issues). Treat as high-risk during review.

58 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Endpoints, credentials, routing, and analytics were historically isolated by User instead of Tenant, creating structural vulnerability where missing or unvalidated parameters like userId triggered unscoped lookups and cross-tenant data access.

SSRF: Outbound connections during custom provider and schema validation are highly susceptible to SSRF because private network checking code repeatedly failed to handle specialized IPv6 literals (e.g. Unique Local Addresses), DNS resolution bypasses, and redirect flows.

Denial of Service: Proxy controllers, seenUsers caches, and model affinity tracking stores lacked bounds limits or proper TTL evictions, leaving the application highly susceptible to Out-Of-Memory (OOM) crashes via unbounded client inputs.