Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
gitbutlerapp/gitbutler
master @ 4534941
43
Fixes
1
CVEs
HIGH
Peak severity
48.6%
Coverage
Highlights
Auth Bypass: 7 prior fixes. Scrutinize any change in this area.
apps/lite/electron/src/main.ts: most-fixed (3 issues). Treat as high-risk during review.
18 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Path Traversal: Workspace file operations were susceptible to arbitrary file reads when paths were not canonicalized and constrained within the worktree directory root. This was repeatedly addressed to prevent symlink escapes.
Command Injection: Improper lexer parsing and shell splitting of multi-statement bash commands allowed command injection bypasses of authorization prompts.
Sandbox Escape: Permissive Tauri default shell-open configurations allow execution of arbitrary commands; replacing them with custom, validated URI openers is critical to enforce boundaries.