Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

cowprotocol/cowswap

              develop @ 4c0eb1e
            

Fixes

CVEs

CRITICAL

Peak severity

31.0%

Coverage

Highlights

Access Control: 4 prior fixes. Scrutinize any change in this area.

and: most-fixed (2 issues). Treat as high-risk during review.

16 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Access Control / Access Control Bypass: Multiple fixes address bypasses of token allowlists and unsupported-asset restrictions. The surface is large: wallet/iframe contexts, list loading, and import buttons. Gaps in enforcing these restrictions can let users trade blocked or unsupported tokens, leading to financial loss or regulatory issues.

Sandbox Escape / Authentication Bypass (postMessage): The most severe fixes center on iframe sandboxing and postMessage validation. A sandbox escape or cross-origin message injection could let an attacker execute hooks or trade orders without user consent, causing direct fund loss.

Reflected XSS / Injection: Three separate fixes block XSS via safe URL scheme validation and HTML allowlisting. Content from CMS or simulation data can contain malicious URLs or raw HTML. Without consistent validation, script execution or phishing is possible.