Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
rome/tools
main @ 392d188
16
Fixes
32
CVEs
HIGH
Peak severity
Highlights
Denial of Service: 13 prior fixes. Scrutinize any change in this area.
crates/rome_console/src/fmt.rs: most-fixed (1 issue). Treat as high-risk during review.
4 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Denial of Service: Recursive AST formatting of deeply nested structures like sequence expressions triggers stack overflow crashes, requiring iterative, loop-based traversals to safely process large files.
Denial of Service: Infinite loops can occur during parsing rewind operations when processing end-of-file (EOF) boundary tokens due to invalid optimization bypasses.
Denial of Service: Recursive formatting inside Display and Debug traits on core syntax tokens can cause infinite recursion and crash the formatter when rendering complex syntax tree nodes.