Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

AmbireTech/extension

              main @ 7edd390
            

Fixes

CVEs

CRITICAL

Peak severity

57.1%

Coverage

Highlights

Auth Bypass: 22 prior fixes. Scrutinize any change in this area.

src/mobile/modules/webview/screens/DappWebViewScreen/DappWebViewScreen.tsx: most-fixed (4 issues). Treat as high-risk during review.

39 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Multiple fixes address unauthorized access to privileged operations via spoofed or cross-origin messages, indicating a high-risk attack surface with recurring bypass patterns.

Auth Bypass: Multiple fixes enforce user verification, key derivation, and re-authentication, showing repeated gaps in biometric authentication logic.

Auth Bypass: Fixes around permission checks, account restriction, and revocation state indicate recurring authorization bypasses in dapp-facing APIs.