Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

vercel/chat

              main @ f691ad5
            

Fixes

CVEs

HIGH

Peak severity

45.5%

Coverage

Highlights

Auth Bypass: 8 prior fixes. Scrutinize any change in this area.

packages/adapter-slack/src/index.ts: most-fixed (7 issues). Treat as high-risk during review.

28 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

SSRF: Attachment downloads from event-supplied URLs are the most consistently patched SSRF surface, with multiple adapters each needing host allowlists, private-IP/DNS checks, redirect revalidation, size caps, and timeouts.

Auth Bypass: Telegram webhooks dispatched updates without secret verification, and later lacked an ingress user allowlist, enabling unauthenticated message injection and unauthorized bot-triggering.

Authentication Bypass: GChat Pub/Sub push and webhook verification accepted tokens without validating the email/email_verified claims against the configured service account, allowing unauthorized pushes.