Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

apple/pkl

              main @ 8a43e51
            

Fixes

CVEs

HIGH

Peak severity

0.0%

Coverage

Highlights

Path Traversal: 6 prior fixes. Scrutinize any change in this area.

pkl-core: most-fixed (7 issues). Treat as high-risk during review.

3 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Path Traversal: Bypassing the `--root-dir` security boundary via nested URIs (such as `jar:file:`) or symlinks allows attackers to read arbitrary files outside the designated sandbox. TOCTOU issues in symlink resolution and improper handling of nested archive paths represent the most critical entry points.

SSRF: Remote Pkl modules fetched over HTTP could exploit redirects to bypass host allowlists and security manager restrictions, potentially reaching internal-only services or APIs.

Security Misconfiguration: Loading projects using standard paths can bypass critical sandbox limits if the configured SecurityManager and environment controls are not explicitly passed to the loader.