Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

notify-rs/notify

              main @ 4118658
            

Fixes

CVEs

MEDIUM

Peak severity

Highlights

Denial of Service: 2 prior fixes. Scrutinize any change in this area.

src/fsevent.rs: most-fixed (1 issue). Treat as high-risk during review.

0 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Denial of Service: A file-existence race condition during path canonicalization can trigger an unhandled panic due to an unsafe `unwrap` call, immediately terminating the file-monitoring thread.

Denial of Service: Closing file system watchers without fully draining the Asynchronous Procedure Call (APC) queue during waits can lead to a steady memory leak, eventually exhausting available system memory.