Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

bytedance/deer-flow

              main @ 42796d7
            

Fixes

CVEs

CRITICAL

Peak severity

45.8%

Coverage

Highlights

Authorization Bypass: 5 prior fixes. Scrutinize any change in this area.

backend/app/gateway/services.py: most-fixed (4 issues). Treat as high-risk during review.

27 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Sandbox Escape: 2 historical fix(es) link backend/packages/harness/deerflow/sandbox/tools.py to Sandbox Escape.

Arbitrary File Access: 1 historical fix(es) link backend/packages/harness/deerflow/skills/installer.py to Arbitrary File Access.

Code Execution: 1 historical fix(es) link backend/app/gateway/routers/mcp.py to Code Execution.