Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

lucasonline0/nuclei

              dev @ a3f1367
            

Fixes

CVEs

CRITICAL

Peak severity

50.0%

Coverage

Highlights

Sandbox Escape: 7 prior fixes. Scrutinize any change in this area.

pkg/catalog/loader/loader.go: most-fixed (5 issues). Treat as high-risk during review.

23 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Sandbox Escape: Multiple sandbox escapes were fixed across JS compilation, file validation, payload loading, workflow imports, and browser launch, indicating a systemic weakness in enforcing sandbox boundaries across different execution contexts.

Signature Verification Bypass: Signature verification bypasses were fixed in template loading and signing, including cache poisoning and a DAST-path bypass, showing that signature checks are not consistently enforced across all template loading branches.

Code Execution: Unsigned or tampered JavaScript and code templates could be executed, mitigated by signature verification and a disable-unsigned-templates flag, indicating a recurring risk of untrusted template execution.