Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
opensolon/solon
main @ 46cfb2f
57
Fixes
3
CVEs
CRITICAL
Peak severity
Highlights
Auth Bypass: 36 prior fixes. Scrutinize any change in this area.
sa-token-solon-plugin: most-fixed (11 issues). Treat as high-risk during review.
45 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: The integration with sa-token suffered from multiple auth bypasses where nested route handlers (like Gateway endpoints) bypassed annotations, path filter inclusion/exclusion rules allowed unauthenticated requests, and null handler mappings skipped verification entirely.
Deserialization of Untrusted Data: Both Solon's Fury serialization wrapper and the Nami Coder Fury plugin lacked robust deserialization protections, enabling potential Remote Code Execution (RCE) via untrusted serialized streams. Security blacklists had to be iteratively reinforced to block dangerous gadget classes.
CORS Misconfiguration: CrossHandler incorrectly permitted wildcard and unvalidated request origins to access sensitive resources with credentials ('Access-Control-Allow-Credentials: true'), exposing users to cross-origin data theft.