Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

jboss/jboss-common-core

              master @ c191bb1
            

Fixes

CVEs

HIGH

Peak severity

0.0%

Coverage

Highlights

Path Traversal: 2 prior fixes. Scrutinize any change in this area.

src/main/java/org/jboss/util/file/JarUtils.java: most-fixed (2 issues). Treat as high-risk during review.

2 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Path Traversal: Extraction of malicious archive entries can lead to arbitrary file creation or overwrite, potentially leading to remote code execution if system files are modified. This component has required multiple fixes to correctly canonicalize and validate entry destinations.

Privilege Escalation: Failure to execute ClassLoader lookups within a privileged execution block can lead to operational failures or unauthorized class loading access when running under a strict Java SecurityManager.