Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

yiisoft/yii

              master @ 244abfb
            

Fixes

CVEs

CRITICAL

Peak severity

100.0%

Coverage

Highlights

Prototype Pollution: 2 prior fixes. Scrutinize any change in this area.

framework/web/js/source/jquery.ba-bbq.js: most-fixed (2 issues). Treat as high-risk during review.

2 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

SQL Injection: CDbCriteria is susceptible to SQL injection when array values are supplied to functions expecting string translations. Attackers can bypass translation sanitization steps to inject arbitrary SQL fragments. Ensure rigorous type validation and enforce string-only inputs for translation functions.

Prototype Pollution: The bundled jquery.ba-bbq.js library recursively merges query parameters into objects without sanitizing special keys. Attackers can pass __proto__ properties to pollute the global Object prototype, potentially leading to cross-site scripting or client-side bypasses.

Reflected XSS: The framework's default error and exception renderers display error messages, file paths, and stack traces without sufficient HTML encoding, enabling attackers to execute malicious scripts in user browsers via crafted requests.