Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

cypress-io/cypress

              develop @ dae6ea0
            

Fixes

CVEs

CRITICAL

Peak severity

38.9%

Coverage

Highlights

Auth Bypass: 12 prior fixes. Scrutinize any change in this area.

lib/secret_sauce.coffee: most-fixed (4 issues). Treat as high-risk during review.

19 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Sandbox Escape: Failure to enforce context isolation by default on GUI windows allowed untrusted renderer scripts to potentially execute arbitrary commands on the host OS. This boundary must be rigidly protected by utilizing contextBridge and enabling sandbox mode.

Path Traversal: The local proxy and file serving mechanisms are susceptible to path traversal if URLs and file paths are not resolved against a canonical root and verified. Sibling endpoints in legacy proxy files (e.g., remote_proxy) had similar validation gaps.

Auth Bypass: Bypasses in privileged backend commands occurred when validation mechanisms (like stack trace checks) could be manipulated via spec or support filenames with spaces, or through direct argument mutation on the driver channel.