Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
typicode/husky
main @ 3f0023d
1
Fixes
0
CVEs
MEDIUM
Peak severity
Highlights
Argument Injection: 1 prior fix. Scrutinize any change in this area.
husky.sh: most-fixed (1 issue). Treat as high-risk during review.
0 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Argument Injection: Hook paths starting with dashes could be parsed as command options by standard utility commands such as dirname and basename, allowing attackers to manipulate command execution context. This was mitigated by adding an explicit end-of-options delimiter.