Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
rabetofficial/rabet-extension
master @ 0db628e
2
Fixes
0
CVEs
MEDIUM
Peak severity
50.0%
Coverage
Highlights
Information Disclosure: 1 prior fix. Scrutinize any change in this area.
popup-src/src/store.js: most-fixed (1 issue). Treat as high-risk during review.
0 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Information Disclosure: Global browser objects like window can expose the complete internal application state, including active wallet sessions, sensitive configuration details, or cached credentials, to untrusted scripts running in the same context.
Sensitive Data Exposure: Displaying private keys in plain-text inputs exposes highly sensitive cryptographic keys to local visual observation (shoulder surfing) or physical screen compromise.