Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

tonhowtf/omniget

              main @ 59319b6
            

Fixes

CVEs

CRITICAL

Peak severity

41.7%

Coverage

Highlights

Denial of Service: 5 prior fixes. Scrutinize any change in this area.

src-tauri/src/commands/auth.rs: most-fixed (2 issues). Treat as high-risk during review.

7 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Command Injection / Arbitrary Code Execution: aria2c used as downloader for all protocols with TLS disabled and unverified binary installs enables remote code execution and MITM.

Path Traversal: Unsanitized plugin_id joined to filesystem path and passed to remove_dir_all allows arbitrary directory deletion.

Path Traversal: Torrent name joined to output_dir without canonicalization enables writing outside intended directory.