Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

google/adk-js

              main @ 071f795
            

Fixes

CVEs

CRITICAL

Peak severity

34.5%

Coverage

Highlights

Auth Bypass: 5 prior fixes. Scrutinize any change in this area.

core/src/agents/processors/request_confirmation_llm_request_processor.ts: most-fixed (3 issues). Treat as high-risk during review.

30 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

SSRF: Multiple SSRF fixes across OAuth2 discovery/token fetches and the load_web_page tool show a recurring failure to block private/loopback/cloud-metadata hosts, with bypasses via IPv4-mapped IPv6 and redirects.

Path Traversal: Path traversal appears in file materialization, zip extraction, artifact storage, and REST API path params, indicating inconsistent path containment and symlink handling across file-writing sinks.

Auth Bypass: Critical auth bypasses in HITL confirmation and OAuth2 credential binding show that authorization checks can be bypassed via foreign-authored events or client-supplied credentials, requiring strict origin/author binding.