Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

kotlin/dokka

              master @ baa4a0c
            

Fixes

CVEs

HIGH

Peak severity

80.0%

Coverage

Highlights

Improper Input Validation: 2 prior fixes. Scrutinize any change in this area.

gradle.properties: most-fixed (2 issues). Treat as high-risk during review.

3 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Dependency Vulnerability: jackson-databind had a known CVE (CVE-2022-42003) fixed by version bump; unpatched dependency can lead to remote code execution or DoS.

Improper Input Validation: Jsoup had CVE-2022-36033 fixed by version bump; vulnerable HTML parser can allow XSS or SSRF via crafted input.

Improper Input Validation: jackson-databind again needed a dependency constraint to enforce patched version, indicating repeated exposure.