Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

eosphoros-ai/db-gpt

              main @ 177bfc8
            

Fixes

CVEs

CRITICAL

Peak severity

0.0%

Coverage

Highlights

Path Traversal: 5 prior fixes. Scrutinize any change in this area.

dbgpt/app/openapi/api_v1/editor/api_editor_v1.py: most-fixed (2 issues). Treat as high-risk during review.

11 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Path Traversal: The application permits path traversal via user-supplied filenames. Exploits in upload-related endpoints can result in arbitrary file writes on the filesystem outside of the intended directory. Safe directory validation must be enforced on all file handling endpoints.

SQL Injection: User-submitted SQL queries are executed directly on the database engine (such as DuckDB), which can allow attackers to bypass standard sandbox controls and interact directly with the local file system. Strong sanitization and query parameterization must be implemented.

Sandbox Escape: Execution of dynamic Python and JavaScript code inside operators and runtimes can silently fall back to host-level execution if a secure sandbox is not explicitly configured and selected, leading to local command execution.