Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

memorilabs/memori

              main @ 56600c5
            

Fixes

CVEs

HIGH

Peak severity

Highlights

SQL Injection: 2 prior fixes. Scrutinize any change in this area.

core/src/storage/manager.rs: most-fixed (1 issue). Treat as high-risk during review.

2 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

SQL Injection: Directly formatting dynamic values like the SQL LIMIT parameter into query strings bypasses database-level safety mechanisms, allowing potential attackers to manipulate database queries.

SQL Injection: Using raw SQL execution with inline parameters rather than parameterized SQLAlchemy text binds exposes Python database adapters to SQL Injection.