Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

opencoworkai/open-codesign

              main @ b94d715
            

Fixes

CVEs

HIGH

Peak severity

21.1%

Coverage

Highlights

Path Traversal: 6 prior fixes. Scrutinize any change in this area.

apps/desktop/src/main/index.ts: most-fixed (4 issues). Treat as high-risk during review.

10 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Path Traversal: Attackers can exploit the custom workspace:// protocol to escape the workspace sandbox via symlinks or malformed relative paths, granting unauthorized access to arbitrary files on the local filesystem.

Path Traversal: Exporters handling formats such as ZIP, PDF, PPTX, and HTML did not validate that targeted files resided within the intended export directory. This allowed directory traversal (including Zip-Slip vulnerabilities on Windows and POSIX targets) during export generation.

Navigation Restriction Bypass: Missing host allowlist restrictions on webContents navigation allowed untrusted Markdown links to redirect the main Electron window to arbitrary external URLs, opening paths to potential sandbox escape and remote code execution.