Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
amark/gun
master @ ed27b48
11
Fixes
9
CVEs
HIGH
Peak severity
20.0%
Coverage
Highlights
Auth Bypass: 4 prior fixes. Scrutinize any change in this area.
sea.js: most-fixed (3 issues). Treat as high-risk during review.
7 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Flaws in certificate validation logic, such as incorrect boolean logic and improper validation of indexOf return values, have historically bypassed key verification checks.
Auth Bypass: Missing structural and transform checks in the cryptographic signature verification process can allow unauthorized self and peer database writes to bypass validation.
Cryptographic Weakness: The historically insecure default use of AES-CBC mode lacked authenticity guarantees, requiring a critical migration to AES-GCM for authenticated encryption.