Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
kong/insomnia
develop @ e5e1ad1
48
Fixes
1
CVEs
HIGH
Peak severity
25.7%
Coverage
Highlights
Path Traversal: 9 prior fixes. Scrutinize any change in this area.
Electron: most-fixed (2 issues). Treat as high-risk during review.
24 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Sandbox Escape: Insecure Electron configurations historically allowed remote code execution via renderer-to-main privilege escalation, requiring contextIsolation enforcement, nodeIntegration disabling, and the removal of the dangerous electron.remote module.
Path Traversal: Insecure file path building allowed arbitrary local file reads. Secure read interfaces and strict directory restrictions must be enforced across all file-reading APIs to prevent loading unauthorized host files.
Privilege Escalation: Insufficient macOS application entitlements allowed local binary hijacks via environment variables such as DYLD_INSERT_LIBRARIES, enabling attackers to execute arbitrary code with application privileges.