Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

wanikua/danghuangshang

              main @ acea185
            

Fixes

CVEs

HIGH

Peak severity

Highlights

Command Injection: 7 prior fixes. Scrutinize any change in this area.

gui/server/index.js: most-fixed (9 issues). Treat as high-risk during review.

11 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Command Injection: The GUI server repeatedly executed shell commands with raw user parameters. While multiple instances in APIs like skill exploration, gateway logging, and search operations were fixed by transitioning to safe invocation schemes, the prevalence of this pattern across distinct endpoints makes it the highest risk surface.

Path Traversal: Insufficient directory boundaries allowed path traversal through session and agent directory manipulations, risking sensitive file leaks. This required the implementation of combined symlink resolution and explicit prefix-matching validations.

Command Injection: The entrypoint script directly interpolated configuration directories inside a raw Python one-liner command, permitting potential system-level command injection during container initialization.