Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
farion1231/cc-switch
main @ 6fd4e6f
23
Fixes
1
CVEs
HIGH
Peak severity
50.0%
Coverage
Highlights
Denial of Service: 7 prior fixes. Scrutinize any change in this area.
src-tauri/src/commands/misc.rs: most-fixed (5 issues). Treat as high-risk during review.
8 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Command Injection: The application invokes external terminal shells and tools (such as macOS osascript and WSL distributions) using process commands. Insufficient argument sanitization and unsafe string-escaping logic historically allowed arbitrary command execution.
Path Traversal: File extraction and path-handling logic failed to validate that destination directories remained within boundaries, risking arbitrary file write or deletion via symbolic links and uncanonicalized path arguments.
Insecure CORS: A permissive CORS layer previously allowed any arbitrary origin to communicate with the local proxy server endpoints, exposing sensitive capabilities to malicious web applications (CVE-2026-6143).