Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
mulesoft/mule
master @ 8d1af8a
128
Fixes
4
CVEs
CRITICAL
Peak severity
62.5%
Coverage
Highlights
Auth Bypass: 54 prior fixes. Scrutinize any change in this area.
core: most-fixed (4 issues). Treat as high-risk during review.
62 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: In-memory OAuth state listeners and token storage historically lacked isolation by Resource Owner ID or configuration name, leading to race conditions and multi-tenant credential overwriting in clustered environments.
Sandbox Escape: Unprivileged deployed modules and applications could bypass sandbox limits by obtaining parent classloader references or importing privileged packages (such as SerializationUtils), exposing internal container APIs.
Auth Bypass: Attackers can bypass security boundaries and downstream controls by injecting properties into the inbound HTTP request headers which the engine incorrectly promoted into the outbound property scope.