Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

QwenLM/qwen-code

              main @ 74e71c5
            

Fixes

CVEs

CRITICAL

Peak severity

11.8%

Coverage

Highlights

Path Traversal: 7 prior fixes. Scrutinize any change in this area.

.github/workflows/qwen-autofix.yml: most-fixed (1 issue). Treat as high-risk during review.

20 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Code Execution: 1 historical fix(es) link packages/cli/src/config/shared-env-keys.ts to Code Execution.

Code Execution: 1 historical fix(es) link packages/core/src/services/gitWorktreeService.ts to Code Execution.

Command Injection: 1 historical fix(es) link packages/core/src/tools/shell.ts to Command Injection.