Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

planetable/planet

              main @ 90fe4dd
            

Fixes

CVEs

MEDIUM

Peak severity

66.7%

Coverage

Highlights

Information Disclosure: 1 prior fix. Scrutinize any change in this area.

Planet.xcodeproj: most-fixed (1 issue). Treat as high-risk during review.

0 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Path Traversal: Insecure handling of local file URL schemas allows arbitrary local file execution or traversal via the NSWorkspace.shared.open API. Attackers could exploit this to trigger local execution of malicious downloaded files.

Sandbox Escape: Outdated update dependencies (Sparkle) run the risk of compromising the App Sandbox environment, allowing potential remote code execution or sandbox escapes during the application update process.

Information Disclosure: Sensitive GPS EXIF metadata leaked through attachments processed via command-line utilities, as metadata stripping was originally only implemented in the main application's GUI flows.