Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
jline/jline3
master @ 250287e
3
Fixes
1
CVEs
HIGH
Peak severity
0.0%
Coverage
Highlights
Path Traversal: 2 prior fixes. Scrutinize any change in this area.
builtins/src/main/java/org/jline/builtins/WebTerminal.java: most-fixed (1 issue). Treat as high-risk during review.
1 high-severity fix in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Path Traversal: Exposing classpath resources to external inputs through dynamic path construction in web handlers allows unauthorized access to sensitive internal application files and configuration data.
Path Traversal: Failing to canonicalize redirected input/output target paths relative to the current virtual session file system lets attackers write or read arbitrary host files, escaping intended sandboxes.
Out-of-bounds Write: Flawed or inverted bounds checking on array copying operations inside high-performance input stream classes can trigger Out-of-bounds Read/Write exceptions or memory corruption.