Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
edgeapp/edge-react-gui
develop @ 1811696
22
Fixes
0
CVEs
HIGH
Peak severity
50.0%
Coverage
Highlights
Denial of Service: 8 prior fixes. Scrutinize any change in this area.
src/actions/CryptoExchangeActions.js: most-fixed (2 issues). Treat as high-risk during review.
5 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Executing key sweeps based on unstable UI-selected wallet state rather than an explicit wallet context can lead to funds being routed to an unauthorized or incorrect wallet.
Privilege Escalation: Allowing unauthenticated or unregistered light accounts to view critical security seeds or raw keys circumvents expected account registration requirements and exposes credentials.
Prototype Pollution: Processing untrusted input within core provider functions like chooseCurrencyWallet without strict schema validation risks prototype pollution or script injection via external plugins.