Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

adbar/trafilatura

              master @ 529d0b6
            

Fixes

CVEs

MEDIUM

Peak severity

100.0%

Coverage

Highlights

Denial of Service: 2 prior fixes. Scrutinize any change in this area.

trafilatura/cli.py: most-fixed (1 issue). Treat as high-risk during review.

0 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Denial of Service: Unbounded network responses can exhaust system resources (RAM/disk) if the remote server feeds an excessively large stream. Implementing manual chunk-size checking during stream reading is critical to reject oversized files early.

Denial of Service: Processing malformed or binary inputs via the command-line interface can lead to unhandled exceptions and immediate application crashes. Robust try-except wrappers are required to handle unexpected parsing failures gracefully.