Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

callstack/agent-device

              main @ ed26b31
            

Fixes

CVEs

CRITICAL

Peak severity

20.0%

Coverage

Highlights

Arbitrary File Access: 1 prior fix. Scrutinize any change in this area.

src/daemon/server/http-server.ts: most-fixed (2 issues). Treat as high-risk during review.

5 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

SSRF: 1 historical fix(es) link src/mcp/command-tools.ts to SSRF.

Arbitrary File Access: 1 historical fix(es) link src/daemon/server/http-server.ts, src/remote/daemon-proxy.ts, src/remote/proxy-install-source-admission.ts to Arbitrary File Access.

Cryptographic Failure: 1 historical fix(es) link src/daemon/http-server.ts to Cryptographic Failure.