Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

kestra-io/kestra

              develop @ f508ee5
            

Fixes

CVEs

CRITICAL

Peak severity

14.3%

Coverage

Highlights

Cross-Site Scripting: 6 prior fixes. Scrutinize any change in this area.

ui/packages/design-system/src/components/Data/KsMarkdown/KsMarkdown.vue: most-fixed (2 issues). Treat as high-risk during review.

18 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Cross-Site Scripting: 2 historical fix(es) link ui/packages/design-system/src/components/Data/KsMarkdown/KsMarkdown.vue to Cross-Site Scripting.

Authentication Bypass: 1 historical fix(es) link webserver/src/main/java/io/kestra/webserver/controllers/api/MiscController.java to Authentication Bypass.

Authentication Bypass: 1 historical fix(es) link webserver/src/main/java/io/kestra/webserver/filter/AuthenticationFilter.java to Authentication Bypass.