Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

statamic/cms

              6.x @ 167987f
            

176

Fixes

CVEs

CRITICAL

Peak severity

12.9%

Coverage

Highlights

Auth Bypass: 90 prior fixes. Scrutinize any change in this area.

app/Providers/AuthServiceProvider.php: most-fixed (3 issues). Treat as high-risk during review.

74 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Insecure token validation or too-lenient permission gates in Live Preview controllers allowed unauthorized users to view drafts or private resources. Standardizing on cryptographically signed tokens is crucial.

SSRF: User-supplied remote URLs for image optimization or watermarks could trigger internal network queries, necessitating hardened IP validation, manual redirect tracking, and strict address parsing to prevent SSRF and DNS rebinding.

Remote Code Execution: The Antlers template engine has had vulnerabilities where template authors or unisolated runtimes could bypass the sandbox boundaries to execute arbitrary PHP code or access privileged application state.