Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
builderio/builder
main @ f75d3ed
15
Fixes
10
CVEs
CRITICAL
Peak severity
40.0%
Coverage
Highlights
Credential Leak: 3 prior fixes. Scrutinize any change in this area.
@babel/traverse: most-fixed (2 issues). Treat as high-risk during review.
11 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Sandbox Escape: The project relied on vulnerable versions of vm2 (prior to 3.11.5) to run untrusted code, exposing the underlying system to critical sandbox escapes and remote code execution (RCE). Similar risks exist across other examples and runtime components.
Arbitrary Code Execution: AST evaluation routines within @babel/traverse were susceptible to arbitrary code execution by evaluating untrusted prototype and non-standard properties instead of restricting evaluation exclusively to safe String, Number, and Math methods.
Cross-Site Scripting: Window message event listeners executed actions without validating that the events originated from a trusted host or inside a validated editing iframe context, allowing attackers to perform cross-site scripting.