Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

elizaos/eliza

              develop @ 488a370
            

Fixes

CVEs

HIGH

Peak severity

Highlights

Denial of Service: 26 prior fixes. Scrutinize any change in this area.

packages/cloud-shared/src/db/repositories/agent-sandboxes.ts: most-fixed (3 issues). Treat as high-risk during review.

13 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

SSRF: Unrestricted fetches of user-supplied or provider-returned attachment URLs allow internal network port scanning and metadata access unless strictly validated via robust private IP validation utility functions.

Auth Bypass: Flawed loopback trust logic permitted local request authentication bypasses via DNS rebinding attacks where malicious subdomains resolve to loopback interfaces.

Denial of Service: Uncaught database pool exceptions and database connection leaks can exhaust PostgreSQL connection limits, resulting in a system-wide application crash.