Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

remorses/playwriter

              main @ f4f9f16
            

Fixes

CVEs

CRITICAL

Peak severity

64.3%

Coverage

Highlights

Auth Bypass: 6 prior fixes. Scrutinize any change in this area.

playwriter/src/cdp-relay.ts: most-fixed (6 issues). Treat as high-risk during review.

7 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Local loopback bypass mechanisms combined with missing middleware on utility endpoints allowed attackers to access privileged control routes remotely, especially when the relay was deployed behind reverse proxies or tunnel agents.

DNS Rebinding: The lack of Host header validation in the HTTP endpoints allowed malicious websites to interact with local relay services via DNS rebinding attacks, bypassing local network isolation rules.

Command Injection: Direct shell execution via child_process.exec allowed arbitrary command injection through untrusted, unescaped file paths during media processing.