Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

shlinkio/shlink

              develop @ 59c62a2
            

Fixes

CVEs

CRITICAL

Peak severity

40.0%

Coverage

Highlights

Auth Bypass: 15 prior fixes. Scrutinize any change in this area.

config/autoload/middleware-pipeline.global.php: most-fixed (2 issues). Treat as high-risk during review.

9 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Failure to accurately map and propagate API key role restrictions (domain-specific, author-restricted) into database query specifications allows restricted keys to access and leakage cross-tenant data. This has required systemic rewrites of query joins and logic filters.

SSRF: The automatic short URL title resolution component performs outgoing HTTP requests to validate targets and extract title tags. Unchecked target resolution allows attackers to perform internal network scanning and unauthorized cross-protocol requests.

Auth Bypass: Improperly managed route whitelists and missing token-validation checks in specialized middleware have previously allowed sensitive, single-step shortening actions or invalid API keys to bypass REST security barriers entirely.