Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

RIPE-NCC/ripe-atlas-software-probe

              master @ 9eba070
            

Fixes

CVEs

HIGH

Peak severity

0.0%

Coverage

Highlights

Path Traversal: 7 prior fixes. Scrutinize any change in this area.

eperd/evtdig.c: most-fixed (4 issues). Treat as high-risk during review.

5 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Path Traversal: Multiple eperd utilities lacked path validation for fuzzing files, allowing traversal outside intended directories; fixes were applied across many components but may not cover all entry points.

Path Traversal: Core validation helper had a length check bug when base directory differed from default, enabling traversal; this is a shared primitive used by many callers.

Path Traversal: condmv (conditional move) lacked path canonicalization and prefix check, allowing traversal via rename operations; duplicate implementations in coreutils and eperd increase risk of divergence.