Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

chocolatey/choco

              develop @ d43496e
            

Fixes

CVEs

CRITICAL

Peak severity

46.9%

Coverage

Highlights

Information Disclosure: 6 prior fixes. Scrutinize any change in this area.

src/chocolatey/infrastructure.app/nuget/ChocolateyNugetCredentialProvider.cs: most-fixed (3 issues). Treat as high-risk during review.

14 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Command Injection: Unsanitized input containing double quotes within registry uninstall strings can allow local attackers to inject arbitrary command sequences during package uninstallation via the CommandExecutor.execute sink.

Path Traversal: Directory operations combining path elements without validating prefix domains or checking for colons can result in root directory resets and path traversal across filesystem boundaries.

Integrity Violation: Failing to strictly validate package cryptographic hashes before trigger operations like installing or upgrading allows remote attackers to perform binary-tampering attacks.