Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

ethena-labs/ethena-minting-client

              main @ fe5c715
            

Fixes

CVEs

HIGH

Peak severity

100.0%

Coverage

Highlights

Dependency Vulnerability: 7 prior fixes. Scrutinize any change in this area.

pnpm-lock.yaml: most-fixed (4 issues). Treat as high-risk during review.

7 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Dependency Vulnerability: Repeatedly patched for CVE-2026-13149 (DoS) across multiple commits, indicating a persistent transitive dependency risk that may resurface if overrides are not maintained.

Dependency Vulnerability: Patched in two separate fixes for SSRF (GHSA-gcfj) and other vulnerabilities, showing a recurring risk in HTTP client used across both JS and Python stacks.

Dependency Vulnerability: Upgraded to fix SSRF and other vulnerabilities; as a core blockchain interaction library, unpatched versions expose critical RPC-related risks.