Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

OpenCoven/coven

              main @ 1364cec
            

Fixes

CVEs

HIGH

Peak severity

40.6%

Coverage

Highlights

Command Injection: 9 prior fixes. Scrutinize any change in this area.

.github/workflows/release-npm.yml: most-fixed (6 issues). Treat as high-risk during review.

36 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Command Injection: Multiple fixes address argv injection into harness CLIs, especially on Windows where cmd.exe re-parses arguments. The recurring pattern is user-supplied model IDs or prompts reaching command construction without proper escaping or an options terminator.

Path Traversal / Symlink Attack: Multiple TOCTOU and symlink-following vulnerabilities in atomic file writes and path resolution. The fixes require canonicalization, no-follow checks, and unpredictable staging paths to prevent writes escaping the intended directory.

Auth Bypass: Session launch and mutation operations were missing execution-binding proof and version checks, allowing unauthorized actions. The fixes add proof validation and API version gating before capability checks.