Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
NVIDIA/NeMo-Guardrails
develop @ 8645364
10
Fixes
0
CVEs
HIGH
Peak severity
40.0%
Coverage
Highlights
Denial of Service: 3 prior fixes. Scrutinize any change in this area.
nemoguardrails/server/api.py: most-fixed (3 issues). Treat as high-risk during review.
5 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Server-Side Template Injection: The template generation engine relies on Jinja2 rendering. If untrusted inputs enter prompt generation without a sandboxed environment, attackers can execute arbitrary code inside the application container. Developers should ensure the SandboxedEnvironment is consistently applied across all rendering utilities.
Path Traversal: Endpoints resolving configurations by ID or loading configurations dynamically can allow malicious users to break out of the configured directories to retrieve arbitrary local files unless strict absolute path canonicalization and directory prefix matches are enforced.
Denial of Service: Handling raw multimodal contents (such as large base64 image strings) directly in context serialization causes history buffer expansion and context window exhaustion. Adequate filtering and type constraints are required to handle complex input schemas safely.