Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
nightwatchjs/nightwatch
main @ 765afc3
6
Fixes
0
CVEs
MEDIUM
Peak severity
33.3%
Coverage
Highlights
Information Disclosure: 3 prior fixes. Scrutinize any change in this area.
lib/http/request.js: most-fixed (3 issues). Treat as high-risk during review.
0 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Information Disclosure: Sensitive parameters such as passwords (e.g., during setPassword execution) and base64 screenshot data have historically leaked into raw HTTP and execution logs. If not consistently masked, these logs disclose sensitive credentials and payloads to anyone with read access.
Auth Bypass: Failure to reset the Chrome DevTools Protocol (CDP) connection state on test session termination allowed credentials like basic authentication to persist and leak across different test sessions.
Denial of Service: The factory module is prone to server-side crashes due to unhandled exceptions when encountering unexpected capabilities (e.g., calling `.toLowerCase()` on an undefined `browserName`).