Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
seleniumhq/selenium
trunk @ cab142e
81
Fixes
1
CVEs
CRITICAL
Peak severity
36.8%
Coverage
Highlights
Denial of Service: 31 prior fixes. Scrutinize any change in this area.
Grid: most-fixed (3 issues). Treat as high-risk during review.
19 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Attackers can bypass administrative boundaries to register rogue nodes or manipulate queues when registration secrets are null or when critical pathways fail to validate host and secret parameters.
Denial of Service: Unbounded WebSocket resource allocation, missing socket close handlers, and failure to release session slots on connection failures can lead to rapid resource exhaustion, locking out legitimate browser-control sessions.
Path Traversal: Extracting archives or processing remote files without canonical path validation allows Zip Slip or file-saving operations to write to arbitrary locations on the host system.