Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

microsoft/semantic-kernel

              main @ 82f2442
            

Fixes

CVEs

HIGH

Peak severity

21.6%

Coverage

Highlights

Path Traversal: 12 prior fixes. Scrutinize any change in this area.

Actions: most-fixed (3 issues). Treat as high-risk during review.

31 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

SSRF: The OpenAPI plugin dynamically sends HTTP requests to endpoints defined in loaded OpenAPI specifications without destination constraints, making it highly susceptible to SSRF against private networks. Secure defaults must enforce URL/scheme validation and domain allowlists.

Path Traversal: Operations reading, uploading, and sharing files via MS Graph or Document plugins were vulnerable to directory traversal. Security requires strict path canonicalization and validating paths against a strict prefix allowlist prior to execution.

SQL Injection: Dynamic SQL query construction and table name interpolation allowed SQL injection. Safeguards require proper identifier quoting (such as brackets for SQL Server) and escaping of table, field, or index names.