Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
jamubc/gemini-mcp-tool
main @ 588e73d
4
Fixes
0
CVEs
HIGH
Peak severity
66.7%
Coverage
Highlights
Path Traversal: 3 prior fixes. Scrutinize any change in this area.
src/backends/gemini.ts: most-fixed (1 issue). Treat as high-risk during review.
4 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Path Traversal: In-root symlinks pointing to targets outside the project root could bypass validation during file inlining, allowing arbitrary local file disclosure. This highlights a critical need to fully resolve and canonicalize paths before verification.
Command Injection: Insufficient argument escaping when invoking subprocesses on Windows allows attackers to inject arbitrary OS commands. All shell inputs must be rigidly quoted and isolated.
Path Traversal: A lack of path-containment checks on cache keys allowed directory traversal via the cache layer, risking unauthorized file reading and deletion.