Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

netease-youdao/lobsterai

              main @ e213217
            

Fixes

CVEs

HIGH

Peak severity

33.3%

Coverage

Highlights

Information Disclosure: 2 prior fixes. Scrutinize any change in this area.

src/main/libs/coworkOpenAICompatProxy.ts: most-fixed (2 issues). Treat as high-risk during review.

4 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Remote Code Execution: Binding the OpenAI compatibility proxy server to all interfaces instead of localhost allowed remote unauthenticated network access, presenting a severe entry point for remote exploitation.

DNS Rebinding: The lack of Host header validation and authorization tokens on local server interfaces exposed the application to DNS Rebinding attacks, bypassing local origin boundaries.

Command Injection: Using inline GitHub expression expansion (github.base_ref) in bash steps allowed untrusted pull request metadata to execute arbitrary shell commands within the CI runner context.