Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

guard/listen

              master @ 2fa1a74
            

Fixes

CVEs

CRITICAL

Peak severity

100.0%

Coverage

Highlights

Code Execution: 2 prior fixes. Scrutinize any change in this area.

.travis.yml: most-fixed (1 issue). Treat as high-risk during review.

2 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Code Execution: Unsafe Marshal.load on network-received message bodies allows remote code execution by crafting malicious serialized payloads.

Code Execution: CI used Ruby 2.2.2, vulnerable to CVE-2015-7551 (unsafe YAML deserialization), which could lead to code execution in the build environment.