Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
shuttle-hq/shuttle
main @ a95d413
22
Fixes
4
CVEs
CRITICAL
Peak severity
Highlights
Auth Bypass: 12 prior fixes. Scrutinize any change in this area.
gateway: most-fixed (4 issues). Treat as high-risk during review.
13 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: The proxy bouncer fell back to matching target paths against the entire raw URI instead of isolating the path component, allowing maliciously structured URIs to bypass authentication checks. Ensure strict isolation of path components during proxy matching.
Auth Bypass: User creation and key recovery endpoints lacked appropriate gateway or administrative authorization checks, allowing unrestricted public tenant registration. Critical administrative APIs must be strictly gated under verified secrets.
Path Traversal: Lack of character restriction on project names allowed subdomains and paths to be manipulated to read or write beyond intended boundaries. Input boundaries for project name fields must restrict characters strictly to alphanumeric symbols and hyphens.