Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
modelengine-group/fit-framework
main @ e2f285d
6
Fixes
0
CVEs
HIGH
Peak severity
50.0%
Coverage
Highlights
Path Traversal: 3 prior fixes. Scrutinize any change in this area.
framework/fit/java/fit-util/src/main/java/modelengine/fitframework/util/support/Unzip.java: most-fixed (2 issues). Treat as high-risk during review.
4 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Path Traversal: The Unzip helper utility has had multiple Zip Slip path traversal bugs, which allow attackers to write arbitrary files outside the target directory if path normalization and prefix validation are bypassed during extraction.
SSRF: Integrating external LLM tooling wrappers can expose internal resources to SSRF if the underlying HTTP clients (like TextRequestsWrapper) do not enforce robust host blocklists against private, localhost, or cloud metadata IP spaces.
Path Traversal: Sandbox directory mapping relies on external inputs, such as branch names, which can trigger breakouts into host directories during volume mapping if the components fail to strictly validate inputs.