Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

eclipse-theia/theia

              master @ 52f32db
            

Fixes

CVEs

CRITICAL

Peak severity

50.0%

Coverage

Highlights

Cross-Site Scripting: 2 prior fixes. Scrutinize any change in this area.

packages/core/src/electron-node/token/electron-token-validator.ts: most-fixed (1 issue). Treat as high-risk during review.

5 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Arbitrary File Access: 1 historical fix(es) link packages/filesystem/src/node/upload/node-file-upload-service.ts to Arbitrary File Access.

Cross-Site Scripting: 1 historical fix(es) link packages/messages/src/browser/notification-component.tsx to Cross-Site Scripting.

Cross-Site Scripting: 1 historical fix(es) link packages/preview/src/browser/markdown/markdown-preview-handler.ts to Cross-Site Scripting.