Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

subsquid/squid-sdk

              master @ 62360f3
            

Fixes

CVEs

MEDIUM

Peak severity

66.7%

Coverage

Highlights

Information Disclosure: 2 prior fixes. Scrutinize any change in this area.

@subsquid/util-internal-code-printer: most-fixed (1 issue). Treat as high-risk during review.

0 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Information Disclosure: RPC URLs with embedded credentials were logged in transport errors, directly exposing secrets to anyone with log access. This is a high-impact leak because RPC endpoints often carry authentication tokens.

Information Disclosure: URL fragments and ws:// endpoints with credentials were not fully redacted, allowing partial credential leakage in diagnostic logs. The fix was incomplete relative to the http.ts fix, indicating a pattern of incomplete redaction across different logging utilities.

Injection: The code printer did not escape block comment closing sequences, allowing crafted input to break out of comments and inject arbitrary code into generated output. This is a classic injection vector in code-generation tools.