Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
NationalSecurityAgency/ghidra
master @ e6ee047
59
Fixes
21
CVEs
CRITICAL
Peak severity
26.5%
Coverage
Highlights
Denial of Service: 19 prior fixes. Scrutinize any change in this area.
Ghidra: most-fixed (9 issues). Treat as high-risk during review.
16 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Ghidra Server PKI authentication has historically accepted public certificates with null or unchecked signatures, allowing remote unauthenticated attackers to impersonate valid users. Enforcing strict, non-null signature verification via Bouncy Castle is critical to server trust.
Deserialization of Untrusted Data: Ghidra Server and client-side RMI connection layers are vulnerable to Java deserialization exploits when opening malicious project URLs, allowing remote code execution. Enforcing strict, allowlist-based serialization filters is paramount.
Path Traversal: Archive parsing in project restoration features has historically permitted path traversal (Zip Slip), potentially allowing arbitrary file writes outside the intended project directory. Handlers must canonicalize paths and verify the target directory prefix.