Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

zipstack/unstract

              main @ 069a177
            

Fixes

CVEs

CRITICAL

Peak severity

27.0%

Coverage

Highlights

Auth Bypass: 37 prior fixes. Scrutinize any change in this area.

backend/account/authentication_controller.py: most-fixed (3 issues). Treat as high-risk during review.

36 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Custom middleware handling authentication was vulnerable to organization ID mismatches and context pollution where stale cookies or improper session header mutation caused cross-tenant data leaks. Strong verification is required on every request path to prevent unauthorized data access.

SQL Injection: Raw SQL execution (e.g., execute_sql) in authentication middleware and database connectors allowed for critical SQL injection. All queries must be refactored to use parameterized values and secure identifier sanitization.

SSRF: Outbound requests triggered by postprocessing webhooks or external file fetch helpers lacked strict validation, exposing internal loopback addresses and missing redirect controls. Proper URL validation and host allowlists are critical for these external connectors.