Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

vaadin/framework

              master @ f5be39f
            

Fixes

CVEs

HIGH

Peak severity

22.7%

Coverage

Highlights

Reflected XSS: 7 prior fixes. Scrutinize any change in this area.

FileUploadHandler.java: most-fixed (3 issues). Treat as high-risk during review.

12 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Reflected XSS: Most frequent vulnerability class; multiple sinks (headerCaption, caption, setInnerHTML, setHTML, addXMLSection, page.write, setCaption) lacked HTML escaping/sanitization, allowing stored/reflected XSS.

Denial of Service: Multiple DoS vectors: unbounded memory in multipart boundary, infinite loop on stream end, deadlocks from synchronous access, stack overflow from recursive lock purging.

Path Traversal: Three distinct traversal vectors: encoded traversal in static file paths, unrestricted resource URLs, and unsanitized upload filenames.