Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

bndtools/bnd

              master @ 6a5d388
            

Fixes

CVEs

HIGH

Peak severity

61.5%

Coverage

Highlights

Command Injection: 3 prior fixes. Scrutinize any change in this area.

JartoolSigner.java: most-fixed (2 issues). Treat as high-risk during review.

11 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Command Injection: Two separate fixes address command injection via Runtime.exec with untrusted keystore paths, indicating a recurring pattern. The fixes switch to argument-based execution, but the risk remains if other code paths still use string concatenation.

Supply Chain Integrity: Two fixes add integrity verification for downloaded artifacts (trusted checksums for Maven, MD5/size for P2). The risk is that other repository types or download paths may lack similar verification, allowing tampered artifacts.

Path Traversal: Three path traversal fixes target Zip Slip and URI traversal. The fixes use canonical path checks and path cleaning, but the variety of components suggests that path handling is a widespread risk, and any new file/URI handling code may be vulnerable.