Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
generalaction/emdash
main @ 1948824
41
Fixes
0
CVEs
HIGH
Peak severity
51.4%
Coverage
Highlights
Command Injection: 14 prior fixes. Scrutinize any change in this area.
src/main/ipc/appIpc.ts: most-fixed (3 issues). Treat as high-risk during review.
28 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Command Injection: Unsanitized connection parameters and external protocols are handled via execution vectors like child_process.exec and shell.openExternal, allowing shell injection or local execution.
Path Traversal: Skills loading and deletion mechanisms are vulnerable to directory traversal, which could allow attackers to manipulate files outside the dedicated root directory.
Auth Bypass: Flaws in webview attachment and prefix validation allow malicious navigation contexts or bypass of critical isolation restrictions inside the embedded web view.