Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

tomtom-international/tomtom-maps-mcp

              main @ 39ab5f1
            

Fixes

CVEs

HIGH

Peak severity

0.0%

Coverage

Highlights

Command Injection: 1 prior fix. Scrutinize any change in this area.

.github/workflows/build.yml: most-fixed (1 issue). Treat as high-risk during review.

2 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

SSRF: The handler fetches user-supplied URLs via axios.get; prior fix added multiple guards but sibling code paths may lack them.

Command Injection: GitHub event data interpolated into run: blocks; fix moved to env vars but other workflow files or steps may still interpolate.