Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

unslothai/unsloth

              main @ a3954ed
            

Fixes

CVEs

CRITICAL

Peak severity

31.6%

Coverage

Highlights

Auth Bypass: 16 prior fixes. Scrutinize any change in this area.

studio/backend/main.py: most-fixed (8 issues). Treat as high-risk during review.

47 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Supply Chain Vulnerability: The project was vulnerable to a high-impact supply chain attack via a dependency on a compromised or quarantined range of the litellm package on PyPI, which could lead to arbitrary code execution or credential theft upon package installation.

Arbitrary Code Execution: Bypasses in model configuration loading allowed model creators to bypass trust_remote_code flags, leading to arbitrary code execution through pretrained models. This was resolved by implementing strict local code-scan consent dialogs and GGUF-only repository validation.

Path Traversal: Several endpoints exposed directory browsing, file-size scanning, and export routes to arbitrary path traversal because input paths were resolved without checking boundaries against allowed directory roots.