Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
floneum/kalosm
main @ 9cb50d7
5
Fixes
0
CVEs
HIGH
Peak severity
60.0%
Coverage
Highlights
Denial of Service: 4 prior fixes. Scrutinize any change in this area.
fusor-ml/cpu/src/reduce.rs: most-fixed (1 issue). Treat as high-risk during review.
3 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Sandbox Escape: Insecure handling of paths allowed plugins to bypass sandbox restrictions and access files outside the designated sandbox directory by providing non-canonicalized paths. This is a critical risk for projects running untrusted plugin code.
Denial of Service: Untruncated model context sequences can exceed maximum sequence lengths during Llama inference, causing either out-of-bounds crashes or excessive resource consumption that halts the application.
Denial of Service: Incorrect boundary condition checks during token stream processing lead to panics through out-of-bounds slicing via 'split_at'.