Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
reactioncommerce/reaction
trunk @ b04166d
156
Fixes
21
CVEs
CRITICAL
Peak severity
Highlights
Auth Bypass: 114 prior fixes. Scrutinize any change in this area.
server/security/collections.js: most-fixed (6 issues). Treat as high-risk during review.
87 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: A critical typo ('Arrar' instead of 'Array') in core permission-checking logic could cause permission checks to crash or be bypassed entirely, undermining the application's global access control structure.
Auth Bypass: Critical authorization bypasses occurred when permission-checking promises inside asynchronous loops were not properly awaited, or when empty role-allowlist restrictions were evaluated, allowing unauthorized updates to global application configurations.
Auth Bypass: The permission validation helper implicitly bypassed standard authorization checks for users with 'owner' privileges or hardcoded roles, creating privilege escalation vectors across tenant boundaries.