Security Context: the context to find the next vulnerability

twentyhq/twenty

main@ 0d66dd1

Fixes42

CVEs10

Peak severityCritical

Commits16,358

Regression coverage32.3%

Highlights

Authorization Bypass: 16 prior fixes. Scrutinize any change in this area.

packages/twenty-server/src/engine/core-modules/file-storage/drivers/local.driver.ts: most-fixed (3 issues). Treat as high-risk during review.

39 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

Path Traversal: 3 historical fix(es) link packages/twenty-server/src/engine/core-modules/file-storage/drivers/local.driver.ts to Path Traversal.

Authentication Bypass: 1 historical fix(es) link packages/twenty-server/src/engine/core-modules/application/application-oauth/oauth.service.ts to Authentication Bypass.

Authorization Bypass: 1 historical fix(es) link packages/twenty-server/src/engine/core-modules/user-session/user-session.resolver.ts to Authorization Bypass.

Last analyzed 6 Oct 2026, 23:26 UTC