Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

reactor/reactor-kotlin-extensions

              main @ d342e29
            

Fixes

CVEs

HIGH

Peak severity

100.0%

Coverage

Highlights

Supply Chain Security: 2 prior fixes. Scrutinize any change in this area.

.github/workflows/gradle-wrapper-validation.yml: most-fixed (2 issues). Treat as high-risk during review.

2 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Supply Chain Security: Mutable action refs (v2, v1) allow a compromised tag to inject malicious code into CI; the fix pins to SHAs, but any new workflow or reused action could regress to a tag.

Supply Chain Security: An unverified gradle-wrapper.jar can execute arbitrary code during builds; validation was added, but other wrapper files or build scripts may bypass it.