Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

earendil-works/pi

              main @ 647c555
            

Fixes

CVEs

HIGH

Peak severity

53.8%

Coverage

Highlights

Denial of Service: 18 prior fixes. Scrutinize any change in this area.

packages/coding-agent/src/core/agent-session.ts: most-fixed (6 issues). Treat as high-risk during review.

6 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Denial of Service: Recursive recovery loops during context window overflows and failure to properly handle WebSocket cleanups on session shutdown trigger persistent loops or process leakage. Additionally, RPC streaming without backpressure limits can lead to buffer failures.

Command Injection: Execution of system shell utilities under OS boundary interfaces is highly vulnerable to argument parsing quirks and command chaining. Input with shell metacharacters can escape intended scopes when launching platform tools.

Path Traversal: Resolving local directory offsets or installing packages can break intended directory boundaries unless path resolution is canonicalized and restricted via prefix matching.