Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
airgap-it/airgap-vault
master @ aa50b7f
9
Fixes
0
CVEs
HIGH
Peak severity
44.4%
Coverage
Highlights
Auth Bypass: 3 prior fixes. Scrutinize any change in this area.
android/app/src/main/java/it/airgap/vault/plugin/securityutils/SecurityUtils.kt: most-fixed (2 issues). Treat as high-risk during review.
1 high-severity fix in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Weak biometric authentication configurations can allow cryptographic keys to be accessed without meeting strong, explicit user authorization thresholds. Enforcing BIOMETRIC_STRONG and device-bound credential constraints prevents downgrades and unauthorized physical device access.
Information Disclosure: Sensitive secret keys displayed on iOS screens can be leaked to unauthorized parties via system snapshots or background task switcher screenshots if appropriate layout overlay protections are missing.
Cryptography: Weak or unavailable physical entropy sources can lead to the generation of deterministic or low-entropy secrets. Validating physical hardware audio entropy and avoiding fallback to dummy data is crucial for the cryptographic security of the vault.