Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
ultralytics/yolov5
master @ f4afe0f
11
Fixes
1
CVEs
CRITICAL
Peak severity
60.0%
Coverage
Highlights
Privilege Escalation: 5 prior fixes. Scrutinize any change in this area.
.github/workflows/ci-testing.yml: most-fixed (1 issue). Treat as high-risk during review.
4 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Arbitrary Code Execution: Unsafe YAML parsing via FullLoader allowed remote code execution when loading untrusted configuration files. This vulnerability was exploited as detailed in CVE-2021-31680. Developers must strictly enforce SafeLoader or use modern formats with safe parsers.
Command Injection: Using shell-enabled subprocess pipelines (shell=True) to compile edge models or manage datasets allowed external parameters to escape shell strings. Eliminating shell=True and using strict array-based arguments prevents command injection.
Privilege Escalation: GitHub Actions workflows initially operated with overly broad default token permissions. Explicitly declaring read-only scopes prevents malicious pull requests or compromised jobs from hijacking repository tokens.