Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
stirling-tools/stirling-pdf
main @ 0a29186
92
Fixes
0
CVEs
HIGH
Peak severity
23.7%
Coverage
Highlights
Auth Bypass: 27 prior fixes. Scrutinize any change in this area.
app/core/src/main/java/stirling/software/SPDF/controller/api/pipeline/PipelineProcessor.java: most-fixed (4 issues). Treat as high-risk during review.
43 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Multi-tenant data isolation and authorization checks were skipped or flawed in SaaS multi-tenant controller logic, permitting user enumeration and cross-team policy modification.
Path Traversal: Extracted ZIP paths or original multipart filenames were processed raw without resolving and comparing target path prefixes, yielding Zip Slip and standard traversal directory escapes.
SSRF: Repeated bypasses of SSRF mitigation logic occurred due to missing private IP ranges (such as the 100.64.0.0/10 CGNAT block, unique local addresses, and loopbacks) and parsing discrepancies.