Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
volcengine/minecontext
main @ 171c7a9
2
Fixes
0
CVEs
HIGH
Peak severity
Highlights
Path Traversal: 1 prior fix. Scrutinize any change in this area.
frontend/src/main/index.ts: most-fixed (1 issue). Treat as high-risk during review.
2 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
SQL Injection: Queries executing dynamically constructed clauses are vulnerable to arbitrary SQL injection. Developers must use parameterized queries and placeholder bindings rather than manual string formatting, especially for dynamic arrays like tag lists.
Path Traversal: Custom protocol handlers (e.g., `vikingdb://`) that read local files can be abused to access arbitrary files on the host filesystem. Every file read operation must canonicalize paths, resolve symlinks, and assert containment within an allowed root directory.