Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

anthropics/claude-cookbooks

              main @ 942b071
            

Fixes

CVEs

HIGH

Peak severity

Highlights

Path Traversal: 2 prior fixes. Scrutinize any change in this area.

.github/workflows: most-fixed (2 issues). Treat as high-risk during review.

4 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Path Traversal: The `read_config_file` and `edit_config_file` tools lacked rigorous directory containment checks, allowing arbitrary file read/write operations outside the intended project root. Developers should ensure all file paths are strictly resolved and validated against a safe base directory before performing filesystem access.

Auth Bypass: GitHub Actions workflows that review pull requests could be abused by external forks to exfiltrate highly sensitive secrets (such as the Anthropic API key and GitHub tokens). Restricting sensitive workflow triggers to internal contributors is necessary to prevent unauthorized code execution.

Path Traversal: Insecure handling of paths within memory deletion helpers allowed path traversal, creating risk of arbitrary file deletion. Validating every path input against expected directory boundaries before executing deletes is required to maintain filesystem integrity.