Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

anthropics/claude-code

              main @ 2aa6ef3
            

Fixes

CVEs

HIGH

Peak severity

Highlights

Command Injection: 1 prior fix. Scrutinize any change in this area.

(.claude/commands/dedupe.md): most-fixed (1 issue). Treat as high-risk during review.

1 high-severity fix in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Command Injection: Directly templating GitHub issue properties into shell commands allowed remote code execution via untrusted workflow payloads. This was mitigated by mapping untrusted inputs to environment variables.

Privilege Abuse: Overly permissive tool definitions (such as Bash allowing arbitrary 'gh api' operations) could allow unauthorized GitHub interactions. Mitigated by enforcing least-privilege configurations and delegating to validated scripts.

Path Traversal: Insufficient validation of environment variables like GH_HOST and GH_REPO could allow parameter injection and path-based local boundary bypasses. Mitigated via strict allowlist validation on these properties.