Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
perwendel/spark
master @ 1973e40
3
Fixes
2
CVEs
HIGH
Peak severity
Highlights
Path Traversal: 3 prior fixes. Scrutinize any change in this area.
spark.resource.ClassPathResource: most-fixed (1 issue). Treat as high-risk during review.
3 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Path Traversal: Misconfigured static file directories allowed attackers to construct paths bypassing the global folder prefix validation, enabling arbitrary directory traversal.
Path Traversal: Insufficient validation in ClassPathResource allowed attackers to read sensitive internal Java classpath structures like META-INF and WEB-INF.
Path Traversal: The resource handling system was vulnerable to arbitrary local file disclosure when processing path strings containing 'file:' schemes, bypassing standard classloader restrictions.