Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

eyupcanakman/nuclei

              dev @ 48e05ca
            

Fixes

CVEs

HIGH

Peak severity

87.5%

Coverage

Highlights

Sandbox Escape: 3 prior fixes. Scrutinize any change in this area.

v2/internal/runner/processor.go: most-fixed (2 issues). Treat as high-risk during review.

7 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Sandbox Escape: Two separate fixes were needed to restrict script imports to safe modules, indicating a persistent weakness where workflow scripts could access dangerous modules. The repeated patching suggests the guard may be incomplete or bypassable in certain execution paths.

Path Traversal: The template update flow had a zip-slip vulnerability allowing path traversal via crafted archive entries. The fix added path canonicalization and prefix checks, but this is a critical data-integrity and code-execution risk if not enforced everywhere.

Path Traversal: Payload file loading allowed path traversal when sandbox was enabled, showing that sandboxing was not consistently applied to file access. The fix added path validation but only when the sandbox flag is active, leaving potential gaps in other load paths.