Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

huggingface/pytorch-pretrained-bert

              main @ 4a72a9a
            

Fixes

CVEs

HIGH

Peak severity

0.0%

Coverage

Highlights

Information Disclosure: 2 prior fixes. Scrutinize any change in this area.

.github/workflows/pr-ci-security-gate.yml: most-fixed (1 issue). Treat as high-risk during review.

1 high-severity fix in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Information Disclosure: The use of 'secrets: inherit' on pull request triggers from untrusted forks allows arbitrary code execution from external collaborators to read and exfiltrate highly sensitive repository secrets.

Information Disclosure: Omitting the sequence index mapping ('seq_idx') when invoking causal convolution functions causes state leakage across packed sequence boundaries, allowing data from one user's prompt to bleed into another's in multi-tenant inference setups.