Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

ruby/rdoc

              master @ 4e303b3
            

Fixes

CVEs

HIGH

Peak severity

0.0%

Coverage

Highlights

Path Traversal: 1 prior fix. Scrutinize any change in this area.

RDoc::AnyMethod: most-fixed (1 issue). Treat as high-risk during review.

1 high-severity fix in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Command Injection: A critical command injection vulnerability (CVE-2021-31799) exists when RDoc attempts to process maliciously crafted filenames containing shell metacharacters such as '|'. This allows local or remote attackers to execute arbitrary system commands if they can control or influence the names of the source files being parsed.

Path Traversal: The RDoc development server is vulnerable to arbitrary file read on the host system if the asset-serving routes fail to fully canonicalize request paths and enforce that they remain within the designated document root.

Reflected XSS: Unescaped superclass method names rendered directly into HTML generator templates permit injection of arbitrary scripts via specially crafted method or operator names.