Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

pglombardo/passwordpusher

              master @ 29bca8d
            

Fixes

CVEs

CRITICAL

Peak severity

56.8%

Coverage

Highlights

Information Disclosure: 11 prior fixes. Scrutinize any change in this area.

app/controllers/passwords_controller.rb: most-fixed (18 issues). Treat as high-risk during review.

16 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Insecure Deserialization: Using Marshal for cookie serialization exposes the application to arbitrary object injection, which can lead directly to Remote Code Execution (RCE) via untrusted user-supplied cookies. This was corrected by migrating to JSON serialization.

Auth Bypass: A logic flaw in password resets automatically logged users in after reset, effectively bypassing Multi-Factor Authentication (MFA/TOTP) for compromised or reset accounts.

Denial of Service: Missing boundaries and lack of input structure validation allowed attackers to trigger application crashes or resource exhaustion through unvalidated payload formats, excessive text lengths, or extreme expiration values.