Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
sindresorhus/got
main @ 4cc6f56
11
Fixes
1
CVEs
HIGH
Peak severity
70.0%
Coverage
Highlights
Denial of Service: 6 prior fixes. Scrutinize any change in this area.
source/core/index.ts: most-fixed (9 issues). Treat as high-risk during review.
1 high-severity fix in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
SSRF: Attackers can coerce the client into making requests to arbitrary local UNIX domain sockets if UNIX socket support is enabled by default. Secure defaults must disable this feature unless explicitly opted in.
Information Disclosure: Sensitive credentials, authorization tokens, or cookie headers can be leaked across security boundaries during redirects, particularly when transitioning between different local UNIX socket paths if they are not treated as distinct origins.
Denial of Service: Memory leaks can occur if event listeners registered on shared HTTP/2 sockets or AbortSignals are not systematically cleaned up when requests complete, time out, or abort, leading to heap exhaustion.