Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
Kong/insomnia
develop @ dea84ed
69
Fixes
1
CVEs
CRITICAL
Peak severity
20.6%
Coverage
Highlights
Path Traversal: 14 prior fixes. Scrutinize any change in this area.
packages/insomnia/src/main/templating-worker-database.ts: most-fixed (3 issues). Treat as high-risk during review.
42 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Sandbox Escape: Multiple distinct sandbox escape vectors were fixed in the plugin execution pipeline, indicating a high-risk surface where untrusted plugin code can reach host capabilities. Fixes address bridge access during discovery, capability gating, module registry hardening, and action routing, but residual gaps in sibling paths remain likely.
Path Traversal: The most common vulnerability class, with fixes across response body writes, git repo operations, storage, and plugin file handling. Many fixes rely on path canonicalization and prefix checks, but the variety of sinks (writeFileSync, readFile, mkdir, rename) suggests a systemic need for centralized path containment.
Auth Bypass: Multiple auth bypasses in OAuth2 flow handling, session expiry validation, and IPC authentication. The templating-worker-database fix introduced per-process tokens and sender validation, indicating a need for robust authentication across IPC and network boundaries.