Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
github/spec-kit
main @ bba473c
30
Fixes
0
CVEs
HIGH
Peak severity
25.9%
Coverage
Highlights
Path Traversal: 18 prior fixes. Scrutinize any change in this area.
src/specify_cli/agents.py: most-fixed (3 issues). Treat as high-risk during review.
13 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Path Traversal: The CLI features multiple paths for reading and writing agent files, commands, and prompts that were susceptible to traversing out of intended boundaries. Developers must consistently enforce path canonicalization and prefix verification using strict base directory checks.
Path Traversal: Extracting extension ZIP archives was vulnerable to Zip Slip directory traversal attacks. Utilizing zipfile.ZipFile.extractall without verifying that each extracted member's target path remains within the output directory allowed arbitrary file overwrite.
SSRF: Retrieving presets and processing HTTP redirects lacked proper validation of destination schemes and hostnames, exposing internal infrastructure and allowing the transport of sensitive authorization headers to untrusted systems.