Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

anionex/banana-slides

              main @ ce924f6
            

Fixes

CVEs

HIGH

Peak severity

36.8%

Coverage

Highlights

Path Traversal: 10 prior fixes. Scrutinize any change in this area.

backend/controllers/export_controller.py: most-fixed (3 issues). Treat as high-risk during review.

17 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Path Traversal: Incomplete path prefix validation in AI reference image loading allowed directory traversal outside of the uploads folder, exposing local image files via malicious markdown structures. This class represents the project's most prevalent exposure.

SSRF: Insecure processing of image fallback URLs allowed bypass of domain restriction rules due to parsing discrepancies between urlparse and requests.get when processing backslash or userinfo syntax.

Path Traversal: Serving of system files through Flask's send_from_directory API lacked robust symbolic link resolution and canonical directory check barriers, exposing local configuration assets.