Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
ghostwright/ghost-os
main @ 991aa48
1
Fixes
0
CVEs
MEDIUM
Peak severity
Highlights
Insecure Temporary File: 1 prior fix. Scrutinize any change in this area.
vision-sidecar: most-fixed (1 issue). Treat as high-risk during review.
0 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Insecure Temporary File: The use of insecure temporary file name generation (tempfile.mktemp) creates a race condition where a local attacker can predict the filename and pre-create a symbolic link, potentially hijacking file writes or accessing sensitive sidecar data.