Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
nottelabs/notte
main @ accc0bb
2
Fixes
0
CVEs
HIGH
Peak severity
100.0%
Coverage
Highlights
Code Injection: 1 prior fix. Scrutinize any change in this area.
packages/notte-browser/src/notte_browser/controller.py: most-fixed (1 issue). Treat as high-risk during review.
2 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Path Traversal: Insecure handling of browser-suggested filenames allowed path traversal. Attackers could manipulate download headers to write arbitrary files outside the designated download directory if path canonicalization and strict base-name extraction are bypassed.
Code Injection: Permissive AST validation allowed execution of unsafe operational symbols, leading to sandbox escapes. Restricting code execution to a minimal allowlist of symbols via a custom node transformer is critical to prevent arbitrary code execution during script parsing.