Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
fivetran/great_expectations
develop @ 3c373a8
10
Fixes
0
CVEs
HIGH
Peak severity
55.6%
Coverage
Highlights
Information Disclosure: 6 prior fixes. Scrutinize any change in this area.
Data: most-fixed (1 issue). Treat as high-risk during review.
2 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Information Disclosure: Secrets and credentials substituted from environment variables can be persisted back to disk or cloud storage within configuration files or exposed in serialized formats. Developers must ensure configurations separate original (unsubstituted) configurations from active runtime instances.
SQL Injection: Dynamic query generation using unquoted column names or raw string replacement of parameters (e.g., table creation or limit parameters) can lead to direct database compromise. Identifier quoting and strict string type validation must be applied.
Information Disclosure: Sensitive credentials, such as Slack webhooks or system passwords, can be written to disk, outputted via logging frameworks, or returned through CLI descriptors during execution workflows.