opf/openproject
dev@ 2bb9b51Fixes24
CVEs91
Peak severityCritical
Commits50,000
Regression coverage28.6%
Highlights
Authorization Bypass: 10 prior fixes. Scrutinize any change in this area.
app/models/permitted_params.rb: most-fixed (2 issues). Treat as high-risk during review.
18 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
Authentication Bypass: 1 historical fix(es) link lib_static/open_project/authentication/strategies/warden/doorkeeper_oauth.rb to Authentication Bypass.
Authorization Bypass: 1 historical fix(es) link app/workers/attachments/finish_direct_upload_job.rb to Authorization Bypass.
Authorization Bypass: 1 historical fix(es) link app/contracts/custom_actions/execute_contract.rb to Authorization Bypass.
Last analyzed 10 Oct 2026, 01:55 UTC