Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
teamhanko/hanko
main @ 70451ef
33
Fixes
0
CVEs
HIGH
Peak severity
31.0%
Coverage
Highlights
Auth Bypass: 17 prior fixes. Scrutinize any change in this area.
backend/handler/webauthn.go: most-fixed (4 issues). Treat as high-risk during review.
18 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: WebAuthn multi-factor authentication could be bypassed if the verified credential was not explicitly validated to belong to the target user ID initiating the login flow. Developers must always verify ownership of credentials loaded during assertion validation.
Auth Bypass: Automatic account linking using identity provider email addresses without validating whether the provider actually marked those emails as verified allows attackers to hijack pre-existing accounts.
Auth Bypass: SAML authentication could be bypassed via IdP-initiated flows when the backend failed to enforce 'InResponseTo' checks and track assertion replay state.