Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

warpedatom/nuclei

              dev @ 764f5a9
            

Fixes

CVEs

CRITICAL

Peak severity

62.5%

Coverage

Highlights

Path Traversal: 5 prior fixes. Scrutinize any change in this area.

pkg/catalog/loader/loader.go: most-fixed (2 issues). Treat as high-risk during review.

24 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Code Execution: Unsigned code templates can be executed via the DAST loading branch, bypassing signature checks and leading to arbitrary command execution.

Sandbox Escape: The JS require() registry could leak cached module state across executions and bypass the local-file-access sandbox, enabling arbitrary file reads.

Path Traversal: Payload file loading was not restricted to the template directory, allowing templates to read arbitrary local files.