Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
dimensiondev/maskbook
develop @ 8d785f4
52
Fixes
0
CVEs
HIGH
Peak severity
30.6%
Coverage
Highlights
Auth Bypass: 26 prior fixes. Scrutinize any change in this area.
src/utils/type-transform/BackupFileShortRepresentation.ts: most-fixed (4 issues). Treat as high-risk during review.
27 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Incomplete parsing or insufficient validation of EIP-4361 sign-in payloads allows attackers to bypass Web3 identity and origin validations.
Cryptographic Issues: Reusing initialization vectors (IVs) across encryption operations compromises the confidentiality of encrypted payloads.
Path Traversal: Improperly validated plugin manifest paths allow malicious local or remote plugins to traverse outside designated sandboxed-modules directories via relative paths.