Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

undb-io/undb

              develop @ 9c67b08
            

Fixes

CVEs

CRITICAL

Peak severity

34.4%

Coverage

Highlights

Auth Bypass: 39 prior fixes. Scrutinize any change in this area.

apps/backend/src/modules/auth/auth.ts: most-fixed (6 issues). Treat as high-risk during review.

43 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: The invitation handling logic contained a severe vulnerability where presenting an invitationId bypassed password verification during login/registration for any existing user account. This was resolved by securing user creation, requiring explicit email matching, and ensuring proper password verification via Bun.password.verify.

Broken Access Control: Workspace boundary enforcement was bypassed during base duplication, where lookup queries were routed to destination workspaces instead of the source, resulting in potential cross-tenant data leaks. Fixing this required passing explicit tenant and space boundaries to the repository queries.

Auth Bypass: User-controlled input schemas failed to omit the spaceId field in createTableDTO, allowing malicious users to perform parameter pollution and trigger cross-tenant table creation.