Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

deriv-com/bot

              master @ 7a0bdd7
            

Fixes

CVEs

HIGH

Peak severity

0.0%

Coverage

Highlights

Privacy/Data Leak: 1 prior fix. Scrutinize any change in this area.

public/sw.js: most-fixed (1 issue). Treat as high-risk during review.

1 high-severity fix in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

URL Sanitization Bypass: Substring matching on hostnames is insufficient; an attacker can craft a hostname like 'evil-oauth.deriv.com' or 'google.com.attacker.com' to bypass the allowlist, leading to auth bypass.

Privacy/Data Leak: Failure to reset analytics identity after logout can cause subsequent users' actions to be attributed to the previous user, leaking behavioral data across sessions.