Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

jestjs/jest

              main @ f49721c
            

Fixes

CVEs

HIGH

Peak severity

Highlights

Sandbox Escape: 2 prior fixes. Scrutinize any change in this area.

packages/jest-util/src/create_process_object.js: most-fixed (2 issues). Treat as high-risk during review.

1 high-severity fix in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Sandbox Escape: Test code can escape the sandbox and access the parent IPC channel if sensitive process methods are not properly mocked or omitted when copying the process object.

Sandbox Escape: Incomplete serialization or copying of the process object allows tests to access parent process event handlers via internal properties.

Prototype Pollution: Vulnerabilities in downstream reporting dependencies can introduce prototype pollution, compromising the CLI runner.