Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

PrimeIntellect-ai/prime-agent

              main @ 47f94a0
            

Fixes

CVEs

HIGH

Peak severity

44.4%

Coverage

Highlights

Denial of Service: 7 prior fixes. Scrutinize any change in this area.

packages/ai/src/mcp/oauth.ts: most-fixed (2 issues). Treat as high-risk during review.

14 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Multiple high-severity auth bypasses were fixed in OAuth token validation, issuer discovery, and refresh locking, indicating a complex and fragile authentication boundary with race conditions and insufficient validation.

Command Injection: Three distinct command injection fixes across different execution paths (bash, ripgrep/fd, Windows cmd) show a systemic lack of input sanitization when constructing shell commands, with high impact potential.

Denial of Service: Seven DoS fixes target exponential recursion, oversized snapshots, large session files, and hanging processes, indicating resource exhaustion is a recurring availability risk across core components.