Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
oldj/switchhosts
master @ ed94fe2
2
Fixes
0
CVEs
HIGH
Peak severity
0.0%
Coverage
Highlights
Open Redirect: 1 prior fix. Scrutinize any change in this area.
src-tauri/src/commands.rs: most-fixed (1 issue). Treat as high-risk during review.
1 high-severity fix in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Privilege Escalation: The privilege escalation vulnerability allowed arbitrary elevated file writes on Windows systems by failing to restrict the target file path in the UAC elevation helper. Developers must ensure the destination path is strictly validated against the canonical system hosts path before executing operations with elevated permissions.
Open Redirect: The open_url command was vulnerable to arbitrary protocol execution (potentially leading to command execution) because it lacked restriction on URI schemes before invoking the system browser. Future commands that open paths or URLs must strictly restrict schemas to http, https, and mailto.