Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
vllm-project/semantic-router
main @ 3c0c133
16
Fixes
0
CVEs
CRITICAL
Peak severity
25.0%
Coverage
Highlights
Auth Bypass: 6 prior fixes. Scrutinize any change in this area.
src/semantic-router/pkg/extproc: most-fixed (2 issues). Treat as high-risk during review.
10 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: In-memory cache queries lacked strict multi-tenant namespace matching and user-scoped partitioning, exposing cached responses across tenants. Developers must ensure that all lookup operations strictly partition cache keys by user.
SQL Injection: Using unescaped user identifiers directly inside Milvus filter-expressions via format strings allowed raw boolean-expression injections. All backend query parameters must be explicitly escaped.
Auth Bypass: The router proxy allowed traffic through even when the authentication service failed to initialize, representing a fail-open security state. A deny-by-default ServiceUnavailableGuard middleware is critical to prevent total auth bypass.