Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

evansd/whitenoise

              main @ 1fd3f90
            

Fixes

CVEs

HIGH

Peak severity

0.0%

Coverage

Highlights

Path Traversal: 2 prior fixes. Scrutinize any change in this area.

src/whitenoise/base.py: most-fixed (1 issue). Treat as high-risk during review.

2 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Path Traversal: Windows path traversal via commonprefix allowing sibling directory access; fixed by canonicalization and commonpath check.

Path Traversal: Autorefresh mode allowed absolute path reads outside static root due to missing root absolutization and commonprefix validation.