Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
keygraphhq/shannon
main @ 5a2f78c
4
Fixes
13
CVEs
CRITICAL
Peak severity
Highlights
Path Traversal: 2 prior fixes. Scrutinize any change in this area.
apps/cli/src/docker.ts: most-fixed (1 issue). Treat as high-risk during review.
2 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Path Traversal: Insecure file path resolution during prompt template imports allows attackers to read arbitrary host files via relative traversal sequences. This bypasses structural application limits and compromises sensitive server data.
Path Traversal: Lack of strict canonicalization and prefix verification on output file paths allows external agents or malicious tools to write arbitrary files to the host system. This could lead to local configuration corruption or remote code execution.
Sandbox Escape: Allowing writable host directory mounts within docker execution environments enables agent tools or untrusted code execution pathways to overwrite active codebase files. This compromises the host runner context.