Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

apache/burr

              main @ 69ba3bc
            

Fixes

CVEs

HIGH

Peak severity

33.3%

Coverage

Highlights

Client-Side XSS: 1 prior fix. Scrutinize any change in this area.

burr/core/action.py: most-fixed (1 issue). Treat as high-risk during review.

2 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Code Injection: The unsafe eval() in Condition.expr remains unchanged; only a new safe_expr with an AST allowlist was added. Any code path still using expr with untrusted input is exploitable.

Insecure Deserialization: importlib.import_module on untrusted module_name can lead to arbitrary code execution. The allowlist is optional, so default configurations remain vulnerable.

Client-Side XSS: react-markdown rendering unsanitized class attributes allows stored XSS in the telemetry UI. Fix was a dependency upgrade, not a code-level sanitization, so custom components could reintroduce the issue.