Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
facebook/flow
main @ 107c865
14
Fixes
0
CVEs
CRITICAL
Peak severity
50.0%
Coverage
Highlights
Command Injection: 3 prior fixes. Scrutinize any change in this area.
src/heap/sharedMem.ml: most-fixed (2 issues). Treat as high-risk during review.
12 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Command Injection: Spawning the language server with shell:true allowed attacker-controlled arguments to be interpreted by the shell, leading to arbitrary command execution.
Command Injection: executeCommand accepted arbitrary command names from LSP requests, enabling injection of malicious commands.
Type Confusion: Unsound sentinel refinement for numeric union tags could treat distinct types as equal, leading to unsafe casts and potential code execution.