Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

the-control-group/voyager

              1.7 @ 7e7e0f4
            

Fixes

CVEs

CRITICAL

Peak severity

0.0%

Coverage

Highlights

Auth Bypass: 3 prior fixes. Scrutinize any change in this area.

src/Commands/AdminCommand.php: most-fixed (1 issue). Treat as high-risk during review.

3 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: The BasePolicy.php framework contains vulnerability patterns where permissions fail-open if a requested model's data type cannot be resolved, allowing potential authorization bypasses. Ensuring fail-closed behavior on null or unresolvable models is crucial to maintain system-wide authorization integrity.

Auth Bypass: VoyagerController historically allowed arbitrary file uploads by omitting initial authorization and context validation. This directly mirrors the risks highlighted in CVE-2024-55417 and CVE-2020-36070, where improper validation of file uploads led to web shell uploads and arbitrary code execution.

Auth Bypass: The admin account creation CLI command lacked sufficient check logic to verify existing users, introducing a risk of overwriting or modifying active administrative credentials via command execution.