Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

rocketride-org/rocketride-server

              develop @ 6b4fcc9
            

Fixes

CVEs

CRITICAL

Peak severity

42.1%

Coverage

Highlights

Denial of Service: 15 prior fixes. Scrutinize any change in this area.

packages/ai/src/ai/web/server.py: most-fixed (4 issues). Treat as high-risk during review.

29 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Path Traversal: Fragile string prefix checks on file paths allowed traversal attacks. The fix replaced this with robust path canonicalization and pathlib.is_relative_to boundary checks. Similar bugs occurred across multiple components like the local text output node and storage providers.

Auth Bypass: Raw query execution engines lacked authorization checks and opt-in gates, allowing unauthenticated clients to bypass safety layers. Coercion vulnerabilities in parsing (e.g., bool('false') returning True) also enabled privileged execution flows.

Remote Code Execution: Dynamic module loading on web endpoints allowed clients to import and run arbitrary code. The fix locked down imports to an explicit allowlist of authorized service modules.