Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
sourcegraph/cody-public-snapshot
main @ 8e20ac6
20
Fixes
0
CVEs
HIGH
Peak severity
57.9%
Coverage
Highlights
Information Disclosure: 6 prior fixes. Scrutinize any change in this area.
lib/shared/src/chat/markdown.ts: most-fixed (2 issues). Treat as high-risk during review.
7 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Command Injection: The extension's mechanism for executing shell commands to fetch context has suffered from logic bypasses in both wildcard filtering and command blocklists. This can allow attackers to execute arbitrary shell commands via engineered repository context or prompt instructions.
Auth Bypass: Context filtering mechanisms (Cody Ignore) have historically failed open when encountering unresolved repository queries or flawed relative path calculations on specific operating systems like Windows. This allows restricted local code or sensitive repositories to be leaked to external Language Models.
Information Disclosure: Sensitive credentials, including OAuth and authorization tokens, have historically been vulnerable to disclosure through inadequate host-verification checks on HTTP redirect targets and inadvertent storage in plaintext configuration files.