Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
requarks/wiki
main @ 6f042e9
77
Fixes
4
CVEs
HIGH
Peak severity
48.6%
Coverage
Highlights
Auth Bypass: 36 prior fixes. Scrutinize any change in this area.
server/core/auth.js: most-fixed (16 issues). Treat as high-risk during review.
50 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Authorization checks have historically skipped critical validation rules, had flawed regex matching logic, or suffered from cache synchronization delays. Sinks like guest user caching and JWT signature/revocation checks are primary vectors.
Privilege Escalation: Users possessing limited administrative permissions (such as group writing capabilities) were previously able to assign users to elevated or system administrator groups due to missing strict capability and group boundary checks.
Cross-Site Scripting (XSS): Rendered mustache templates and text blocks frequently allowed client-side template injection and markdown-attribute XSS bypasses. Restricting plugin attributes and compiling with Vue pre-compile directives were required to patch these.