Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

gitlabhq/cli

              main @ 059a0de
            

Fixes

CVEs

HIGH

Peak severity

Highlights

Path Traversal: 5 prior fixes. Scrutinize any change in this area.

internal/config/config_migration.go: most-fixed (2 issues). Treat as high-risk during review.

4 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Path Traversal: During CI artifact extraction, untrusted zip paths could traverse directories and overwrite arbitrary files on the system unless strict path canonicalization and target prefix verification are performed.

Command Injection: Automatic migration of legacy local and global configurations allowed arbitrary command execution or settings injection via malicious files in untrusted directories, ultimately requiring the removal of the migration logic.

Auth Bypass: Exposing internal CLI commands over the Model Context Protocol (MCP) without strict annotation-based routing allowed arbitrary, unauthorized execution of internal utilities.