Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

othmanadi/planning-with-files

              master @ 8f5a3c2
            

Fixes

CVEs

HIGH

Peak severity

0.0%

Coverage

Highlights

Path Traversal: 3 prior fixes. Scrutinize any change in this area.

.codebuddy/skills/planning-with-files/SKILL.md: most-fixed (1 issue). Treat as high-risk during review.

3 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Path Traversal: Plan resolution scripts previously failed to confirm that resolved directories remained within the designated workspace root, potentially allowing malicious files to be written or read outside expected boundaries.

Auth Bypass: Unanchored regular expression matching on the 'stop_hook_active' JSON field allowed authentication or integrity checks to be bypassed using nested or partial matches.

Path Traversal: The active_plan configuration was vulnerable to arbitrary path traversal, requiring strict alphanumeric validation of file references to prevent local file inclusion or lookup manipulation.