Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

javadelight/delight-rhino-sandbox

              master @ bd22be9
            

Fixes

CVEs

CRITICAL

Peak severity

71.0%

Coverage

Highlights

Sandbox Escape: 32 prior fixes. Scrutinize any change in this area.

src/main/java/delight/rhinosandox/internal/RhinoSandboxImpl.java: most-fixed (18 issues). Treat as high-risk during review.

30 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Sandbox Escape: Multiple fixes show that ClassShutter and SafeWrapFactory were not consistently installed before script evaluation, allowing full Java runtime access.

Sandbox Escape: Scope handling is a recurring weakness: unsafe prototype chains, scope joins, and unsealed global scopes allow scripts to pollute shared objects or access privileged scopes.

Sandbox Escape: Dangerous reflection methods (getClass, getClassLoader, forName) were accessible on wrapped Java objects, enabling arbitrary reflection-based API calls.