Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
openblocks-dev/openblocks
develop @ 6be3679
8
Fixes
3
CVEs
HIGH
Peak severity
12.5%
Coverage
Highlights
Auth Bypass: 3 prior fixes. Scrutinize any change in this area.
server/api-service/openblocks-domain/src/main/java/com/openblocks/domain/datasource/repository/DatasourceRepository.java: most-fixed (1 issue). Treat as high-risk during review.
5 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Inadequate cross-tenant/cross-organization checks allow unauthorized actors to interact with datasources belonging to other users or organizations. Consistent multi-tenant isolation is a core dependency here.
Auth Bypass: System static datasources bypassed default permission checks during bulk retrieval evaluations, allowing access to privileged system configurations. Ensure all static resources follow explicit, strict permission evaluation paths.
Broken Access Control: Lack of granular workspace-level and solo-mode authorization checks when fetching or testing datasource configurations could permit malicious actions. High-privilege API routes must enforce explicit authorization checks.