Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
neomjs/neo
dev @ 4584d46
49
Fixes
9
CVEs
CRITICAL
Peak severity
34.2%
Coverage
Highlights
Auth Bypass: 27 prior fixes. Scrutinize any change in this area.
GraphService: most-fixed (2 issues). Treat as high-risk during review.
26 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Multi-tenant isolation and memorySharing policies were previously bypassed, allowing unauthorized retrieval of other users' memories or private thoughts. Correctly enforcing tenant contexts is critical for secure multi-tenant deployments.
Auth Bypass: Unsafe query building and a lack of identity stamping in SQLite adapter engines bypassed intended database-level Row-Level Security, potentially leaking nodes and edges across tenants.
Prototype Pollution: Untrusted configuration inputs allowed instantiation of arbitrary classes and bypassed module blocklists when object graphs were not parsed recursively.