Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

sub-store-org/sub-store

              master @ dd09559
            

Fixes

CVEs

HIGH

Peak severity

50.0%

Coverage

Highlights

Auth Bypass: 1 prior fix. Scrutinize any change in this area.

backend/src/restful/token.js: most-fixed (2 issues). Treat as high-risk during review.

4 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Code Injection: The application used 'eval' for dynamic script execution in proxy-utils.js, creating potential for severe Code Injection. While mitigated by switching to the Function constructor, dynamic evaluation remains a high-risk vector that requires isolated execution sandboxing.

Auth Bypass: Flaws in share-token validation permitted unauthorized access to shared resources when use-count expiration checks were bypassed or missing, requiring centralized consumption enforcement.

Information Disclosure: Generating or signing tokens leaked the master backend secret path (SUB_STORE_FRONTEND_BACKEND_PATH) to clients, exposing sensitive application paths that could aid targeted attacks.