Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
ngrx/platform
main @ d6f91d9
2
Fixes
35
CVEs
CRITICAL
Peak severity
Highlights
Denial of Service: 2 prior fixes. Scrutinize any change in this area.
modules/signals/rxjs-interop/src/rx-method.ts: most-fixed (1 issue). Treat as high-risk during review.
0 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Denial of Service: Unbounded effect registration holds references to destroyed instances, leading to memory exhaustion over time. Correcting this requires registering explicit onDestroy callbacks on the instance injector.
Denial of Service: Unbounded subscription and effect leaks occur on ancestor injectors when the caller's context is not dynamically checked. The system must retrieve the caller Injector dynamically to cleanly destroy active subscriptions.