Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
MetaMask/metamask-extension
main @ f75e161
158
Fixes
0
CVEs
CRITICAL
Peak severity
53.1%
Coverage
Highlights
Auth Bypass: 28 prior fixes. Scrutinize any change in this area.
dependency: most-fixed (15 issues). Treat as high-risk during review.
111 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Multiple fixes target the core controller, including seed phrase export, sign-out, and permission handling, indicating a high-value, frequently-bypassed surface.
Security Control Bypass: The trust-signals middleware has been patched multiple times to close gaps in origin/path/nested-call scanning, showing that the scanning pipeline is a critical and evolving control.
Dependency Vulnerability: Multiple critical code-execution vulnerabilities in protobufjs were patched, representing the highest severity risk in the dependency chain.