Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

openbb-finance/openbb

              develop @ 3e071fc
            

Fixes

CVEs

HIGH

Peak severity

53.8%

Coverage

Highlights

Information Disclosure: 6 prior fixes. Scrutinize any change in this area.

frontend-components/tables: most-fixed (2 issues). Treat as high-risk during review.

4 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Code Execution: Unsafe eval() of untrusted CLI arguments allowed arbitrary code execution; replaced with ast.literal_eval. Any other eval-like sink in argument parsing is a critical risk.

SQL Injection: Dynamic column names interpolated into raw ALTER TABLE without escaping; fixed by escaping double quotes. Similar raw SQL with dynamic identifiers elsewhere is a high-risk pattern.

Cross-Site Scripting (XSS): Rendering untrusted cell data via dangerouslySetInnerHTML without sanitization; fixed by adding xss library. Any other HTML rendering path for user data is a risk.