Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
rustic-rs/rustic
main @ f6b46ec
3
Fixes
0
CVEs
MEDIUM
Peak severity
66.7%
Coverage
Highlights
Path Traversal: 2 prior fixes. Scrutinize any change in this area.
src/backend/local.rs: most-fixed (1 issue). Treat as high-risk during review.
0 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Path Traversal: During restore operations, modifying file ownership, permissions, and timestamps without explicitly preventing symlink following can allow an attacker to alter arbitrary files on the host filesystem via path traversal.
Path Traversal: Incomplete sanitization of backup source paths, particularly after run-before hooks modify execution state, can lead to directory traversal or unauthorized file inclusion in backups.
Auth Bypass: Snapshot deletion routines that accept explicit IDs might bypass standard delete-protection safeguards, allowing protected snapshots to be prematurely removed.