Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

steel-dev/steel-browser

              main @ 5a26b95
            

Fixes

CVEs

HIGH

Peak severity

57.1%

Coverage

Highlights

Denial of Service: 3 prior fixes. Scrutinize any change in this area.

api/src/services/cdp.service.ts: most-fixed (2 issues). Treat as high-risk during review.

2 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Detecting a security violation (e.g., forbidden file:// protocol access) bypassed proper session teardown and plugin hooks, potentially leaving sessions active and exposing sensitive state. Developers should enforce complete termination on any security event.

SSRF: Internal API requests could be routed through external upstream proxies if the target hostname is not correctly validated, risking exposure of sensitive internal services.

Denial of Service: Large write buffers and circular references during CDP event serialization can cause V8 call-stack overflows or endless serialization loops, leading to daemon crashes.