Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

mouseww/anything-analyzer

              main @ e3bad73
            

Fixes

CVEs

CRITICAL

Peak severity

66.7%

Coverage

Highlights

Denial of Service: 1 prior fix. Scrutinize any change in this area.

src/main/ai/llm-router.ts: most-fixed (1 issue). Treat as high-risk during review.

1 high-severity fix in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Privilege Escalation: Exposing an unauthenticated raw CDP command tool allows any MCP client to execute arbitrary browser commands, leading to full compromise.

Denial of Service: Unbounded tool call loop with growing context can exhaust memory, enabling DoS.

Sandbox Escape: Shared default Electron session storage allows cross-session data leakage, breaking sandbox isolation.