Highlights
Path Traversal: 3 prior fixes. Scrutinize any change in this area.
elevenlabs_mcp/utils.py: most-fixed (2 issues). Treat as high-risk during review.
3 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Path Traversal: File write operation lacked containment, allowing writes outside the output directory.
Path Traversal: Input file read was not confined to base path, enabling arbitrary file reads.
Path Traversal: Resource handler allowed absolute-path traversal bypass, missing canonicalization.