Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
plandex-ai/plandex
main @ e2d7720
7
Fixes
0
CVEs
HIGH
Peak severity
50.0%
Coverage
Highlights
Auth Bypass: 3 prior fixes. Scrutinize any change in this area.
app/cli/lib/context_update.go: most-fixed (1 issue). Treat as high-risk during review.
4 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: API endpoints querying or listing plans failed to authorize the user's project ownership, permitting access to unauthorized project data. Always filter requested IDs against the current user's authorized projects before querying.
Auth Bypass: Flawed organization membership verification could allow users to bypass plan and project-level access controls. Access checks must robustly validate active organization membership constraints.
Denial of Service: Unvalidated line ranges extracted from LLM responses caused out-of-bounds slice indexing panics, leading to denial of service. Strict range validation is required prior to slicing files based on external strings.