Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
dahezhiquan/ManScan
dev @ 4db2947
16
Fixes
0
CVEs
CRITICAL
Peak severity
50.0%
Coverage
Highlights
Path Traversal: 4 prior fixes. Scrutinize any change in this area.
(multiple: most-fixed (1 issue). Treat as high-risk during review.
13 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Path Traversal: Multiple fixes across different components address arbitrary file read/write via path traversal, indicating a systemic weakness in path containment and scheme restrictions.
Sandbox Escape: JavaScript and tengo script sandboxes were both escaped via require() and module imports, requiring allowlist and flag enforcement to prevent local file access and arbitrary module loading.
Code Execution: Unsigned or non-opted-in code templates could be executed, highlighting a need for strict integrity and explicit enablement checks across template loading and workflow dispatch.