Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

webstudio-is/webstudio

              main @ 2a77c2a
            

Fixes

CVEs

HIGH

Peak severity

28.1%

Coverage

Highlights

Auth Bypass: 22 prior fixes. Scrutinize any change in this area.

packages/trpc-interface/src/authorize/project.server.ts: most-fixed (3 issues). Treat as high-risk during review.

26 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Critical verification failures in the project permit evaluation logic allowed bypass of authorization boundaries when calling TRPC services or loading templates.

Path Traversal: Unsanitized asset filenames provided by users during local uploads or direct S3 uploads allowed arbitrary file path manipulation.

Remote Code Execution: Unchecked mathematical expressions inputted inside the CSS style panel were passed directly to a javascript eval() sink.