vercel/turborepo
main@ 0b2a3a5Fixes12
CVEs3
Peak severityCritical
Commits10,482
Regression coverage62.5%
Highlights
Path Traversal: 6 prior fixes. Scrutinize any change in this area.
crates/turborepo-cache/src/cache_archive/restore_directory.rs: most-fixed (3 issues). Treat as high-risk during review.
12 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
Path Traversal: 2 historical fix(es) link crates/turborepo-cache/src/cache_archive/restore_directory.rs to Path Traversal.
Command Injection: 1 historical fix(es) link crates/turborepo-lockfiles/src/berry/mod.rs to Command Injection.
Authentication Bypass: 1 historical fix(es) link crates/turborepo-auth/src/auth/login.rs to Authentication Bypass.
Last analyzed 6 Oct 2026, 07:43 UTC