Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

explosion/spacy-llm

              main @ 99ac922
            

Fixes

CVEs

HIGH

Peak severity

Highlights

Credential Leak: 1 prior fix. Scrutinize any change in this area.

.github/workflows/explosionbot.yml: most-fixed (1 issue). Treat as high-risk during review.

1 high-severity fix in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Sandbox Escape: The use of standard Jinja2 Environment instances for template rendering in built-in tasks allowed for arbitrary code execution and sandbox escapes. Developers must ensure that all Jinja2 environments are strictly configured using SandboxedEnvironment to restrict unsafe attribute access.

Credential Leak: Embedding sensitive tokens directly within pip install URLs in GitHub workflows led to credential leaks in build logs. Utilizing git config 'insteadOf' configurations with environment variables prevents sensitive tokens from being printed or stored in plain text during repository checkouts and dependency resolution.