guardvibe 3.1.17 → 3.1.18

package/build/tools/check-code.js

@@ -842,6 +842,21 @@ export function analyzeCode(code, language, framework, filePath, configDir, rule
                 if (/\b\w*Ref\.current\b/.test(matchedLine))
                     continue;
             }
+            // VG152 (Object Injection via Dynamic Property Access): only fire on bracket-key
+            // ASSIGNMENT (`obj[key] = ...`) — that's the prototype-pollution shape. Read-only
+            // bracket access (`obj[key]` on RHS, in conditional, in function arg) does not
+            // pollute prototypes; even with attacker-controlled key, you only get a read of
+            // an existing or undefined property. The rule's pattern triggers on `req.X` etc.
+            // upstream + `\w+[key]` somewhere within 100 chars, which fires on completely
+            // benign read patterns like `data[key]` inside `for (const key in data)` loops or
+            // `DEFAULT_REDIRECTS[key]` lookups against hardcoded constants. The match string
+            // ends at `]` (no trailing `=`), so look slightly past match end for the assignment.
+            if (rule.id === "VG152") {
+                const window = code.slice(match.index, match.index + match[0].length + 10);
+                const isAssignment = /\w+\s*\[\s*(?:key|field|prop|name|column|attr|param)\s*\]\s*=(?!=)/.test(window);
+                if (!isAssignment)
+                    continue;
+            }
             // VG126 (Dynamic RegExp from User Input): skip when the variable name signals it has
             // already been escaped/sanitized (e.g. `escapedElement`, `safeQuery`, `sanitizedInput`).
             if (rule.id === "VG126") {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "guardvibe",
-  "version": "3.1.17",
+  "version": "3.1.18",
   "mcpName": "io.github.goklab/guardvibe",
   "description": "Security MCP for vibe coding. 390 rules, 36 tools, CLI + doctor. Host security, auth coverage mapping, LLM-powered deep scan (IDOR/business logic), taint analysis, +25 AI-native rules (MCP supply-chain, RAG/vector poisoning, agent loop DoS, public-prefix LLM keys, sandbox bypass). Plus Next.js, Supabase, Clerk, Stripe, Prisma, tRPC, Hono, GraphQL, Convex, Turso, Uploadthing, AI SDK, and the full AI-generated stack.",
   "type": "module",