Security context

Highlights

Denial of Service: 7 prior fixes. Scrutinize any change in this area.

src/executor/query.rs: most-fixed (2 issues). Treat as high-risk during review.

7 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

Denial of Service: Recursive role evaluations containing cyclic hierarchies resulted in infinite loops, leading to CPU exhaustion. Developers must track visited states using a set during graph traversal to prevent infinite recursion.

Auth Bypass: Bypassing RBAC restrictions was possible when a DatabaseTransaction was initiated through a RestrictedConnection because the transaction was not correctly wrapped in a RestrictedTransaction. This allowed operations to bypass security boundaries.

Broken Access Control: Single-row updates and deletes that were constructed with an empty primary key list could result in a missing WHERE clause, leading to unintended mass database modifications or deletions. Explicit validation of primary key presence is required.