Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

microsoft/TypeScript

              main @ 9a8581c
            

Fixes

CVEs

HIGH

Peak severity

76.9%

Coverage

Highlights

Denial of Service: 40 prior fixes. Scrutinize any change in this area.

Compiler: most-fixed (7 issues). Treat as high-risk during review.

7 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Denial of Service: Multiple stack-overflow and hang fixes in the Go checker from unbounded recursion on self-referential or conditional types, plus an integer overflow in union size computation. This component is the most frequently patched for DoS.

Denial of Service: Multiple crashes in token navigation and signature help on error-recovered or WIP JSX and JSDoc nodes, indicating fragile boundary and reparsing logic.

Denial of Service: Multiple server crashes from unhandled nulls, missing validation, and unbounded message sizes, affecting tssserver availability.