Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
millionco/react-doctor
main @ ba2af1b
4
Fixes
0
CVEs
HIGH
Peak severity
25.0%
Coverage
Highlights
Argument Injection: 1 prior fix. Scrutinize any change in this area.
.github/workflows: most-fixed (1 issue). Treat as high-risk during review.
3 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Command Injection: The staged files utility previously executed raw system commands using string interpolation with execSync, which allowed arbitrary command execution. This risk was mitigated by switching to spawnSync with structured argument arrays.
Path Traversal: The staged-files service was vulnerable to a classic zip-slip vulnerability via fs.writeFileSync when unpacking or writing files, requiring canonicalization and prefix checks to block path manipulation.
Argument Injection: Git commands executed within runners were susceptible to argument injection because of unvalidated branch inputs, which could be exploited to pass malicious flags during git checkout operations.