Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
metamask/metamask-extension
main @ 7ecf3b5
133
Fixes
0
CVEs
CRITICAL
Peak severity
79.3%
Coverage
Highlights
Auth Bypass: 44 prior fixes. Scrutinize any change in this area.
package.json: most-fixed (16 issues). Treat as high-risk during review.
54 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Attackers can spoof the originating tab or iframe to bypass client permission boundaries if tabIdOriginMap is manipulated or the main frame origin is not correctly validated.
Signature Validation Bypass: Threat actors bypass Blockaid and PPOM security warning alerts by sending transaction requests with malformed, non-0x prefixed integer or decimal addresses, which slip past validation regexes.
Privilege Escalation: Exposing privileged Snap RPC methods like SubmitRequest to arbitrary websites allows malicious dApps to execute elevated keyring operations.