Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

kovidgoyal/kitty

              master @ d3c7889
            

Fixes

CVEs

CRITICAL

Peak severity

33.3%

Coverage

Highlights

Auth Bypass: 12 prior fixes. Scrutinize any change in this area.

kitty/window.py: most-fixed (22 issues). Treat as high-risk during review.

41 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Terminal Emulator Escape Sequence Injection: Attackers writing escape sequences to the terminal can trigger arbitrary action execution, bypass paste boundaries, or perform color control query injections if control codes are not aggressively stripped.

Memory Corruption: Complex PNG parsing and chunked graphic protocol commands frequently result in integer overflows or heap out-of-bounds writes during canvas composition.

Remote Code Execution: Unsanitized notification identifiers or payload data inside OSC 99 notification sequences can lead to arbitrary code execution when the notification is activated or clicked.