Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
vercel/hyper
canary @ da0c401
4
Fixes
15
CVEs
CRITICAL
Peak severity
Highlights
Command Injection: 1 prior fix. Scrutinize any change in this area.
app/index.html: most-fixed (1 issue). Treat as high-risk during review.
1 high-severity fix in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Remote Code Execution: Insecure Electron runtime configurations (such as RunAsNode/enableNodeCliInspectArguments) combined with weak Content Security Policies in the main web page can allow remote attackers to execute arbitrary system code. Implementing a strict CSP mitigates XSS-to-RCE escalation paths.
Command Injection: Dragging and dropping files with malicious paths into the terminal can trigger arbitrary shell command execution if the path arguments are not correctly quoted and escaped for the specific active shell syntax (e.g. cmd.exe vs bash).
Open Redirect: Weak regular expressions in the url-command parser can match non-HTTP/HTTPS schemes, allowing attackers to trigger unexpected protocol handlers or redirect interactions to untrusted schemes.