theonedev/onedev
main@ 58b26ebFixes17
CVEs0
Peak severityCritical
Commits6,956
Regression coverage13.3%
Highlights
Unsafe Deserialization: 4 prior fixes. Scrutinize any change in this area.
server-plugin/server-plugin-pack-maven/src/main/java/io/onedev/server/plugin/pack/maven/MavenPackPanel.java: most-fixed (2 issues). Treat as high-risk during review.
15 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
Unsafe Deserialization: 1 historical fix(es) link server-plugin/server-plugin-executor-kubernetes/src/main/java/io/onedev/server/plugin/executor/kubernetes/KubernetesResource.java to Unsafe Deserialization.
Arbitrary File Access: 1 historical fix(es) link server-core/src/main/java/io/onedev/server/migration/XmlBuildSpecMigrator.java to Arbitrary File Access.
Arbitrary File Access: 1 historical fix(es) link server-plugin/server-plugin-pack-maven/src/main/java/io/onedev/server/plugin/pack/maven/MavenPackPanel.java to Arbitrary File Access.
Last analyzed 30 Sep 2026, 10:10 UTC