Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

dequelabs/axe-core

              develop @ e841a33
            

Fixes

CVEs

MEDIUM

Peak severity

Highlights

Prototype Pollution: 2 prior fixes. Scrutinize any change in this area.

lib/core/utils/respondable.js: most-fixed (2 issues). Treat as high-risk during review.

0 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Prototype Pollution: Unsafe object property access when resolving message topics and channel identifiers allows message handlers to retrieve properties inherited from Object.prototype, which can lead to logic bypasses or unexpected behavior during frame communication.