Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

tencent/ai-infra-guard

              main @ bb15526
            

Fixes

CVEs

CRITICAL

Peak severity

20.0%

Coverage

Highlights

Path Traversal: 4 prior fixes. Scrutinize any change in this area.

common/websocket/knowledge2_api.go: most-fixed (3 issues). Treat as high-risk during review.

5 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Path Traversal: 2 historical fix(es) link common/websocket/knowledge2_api.go to Path Traversal.

Command Injection: 1 historical fix(es) link mcp-scan/mcp_scan/tools/dispatcher.py, mcp-scan/mcp_scan/utils/mcp_tools.py to Command Injection.

Path Traversal: 1 historical fix(es) link common/websocket/knowledge_api.go, common/websocket/knowledge2_api.go, common/utils/api.go, common/agent/prompt_tasks.go, common/agent/tasks.go to Path Traversal.